win

Group Policy Settings ReferenceWindows Server 2008 R2 and Windows 7

This spreadsheet lists the policy settings for computer and user configurations included in the Administrative template files (admx/adml) delivered with

Windows Server 2008, Windows Vista with SP1, Microsoft Windows Server 2003 with SP2 or earlier service packs, Windows XP Professional with SP2 or earlier service packs, and Windows 2000 with SP5 or earlier service packs. These files are used to expose policy settings when you edit Group Policy objects (GPOs) using the Group Policy Management Console (GPMC).

You can use the filtering capabilities included in this spreadsheet to view a specific subset of data based on one value or a combination of values that are available

To view a specific subset of data, click the drop-down arrow in the column heading of cells that contain the value or combination of values on which you want to filter,and then click the desired value in the drop-down list. For example, to view a subset of policy settings that are available for Windows Server 2008 in the

What's NewThe spreadsheet contains three columns that provide more information about each policy setting's behavior related to reboots, logoffs, and schema extensions. These columns are the following:

Legal Notice

The information contained in this document represents the current view of Microsoft Corporation on the issues discussed as of the date of publication. Because Microsoft must respond to changing market

conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information presented after the date of publication.

This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS DOCUMENT.

Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of this document may be reproduced, stored in or introduced into a retrieval

system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation.

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license

agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property.

Unless otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places and events depicted herein are fictitious, and no association with any real

company, organization, product, domain name, email address, logo, person, place or event is intended or should be inferred.

in the United States and/or other countries. The names of actual companies and products mentioned herein may be the trademarks of their respective owners.

Windows Server® 2008 R2 and Windows® 7. The policy settings included in this spreadsheet cover Windows 7, Windows Server 2008 R2,

in one or more of the columns. In addition, you can click Custom in the drop-down list of any of the column headings to add additional filtering criteria within that column.

Administrative Template worksheet, click the drop-down arrow next to Supported On, and then click At least Microsoft Windows Server 2008.

Reboot Required: A "Yes" in this column means Windows requires a restart before it applies the described policy setting.Logoff Required: A "Yes" in this column means Windows requires the user to log off and log on again before it applies the described policy setting.Active Directory Schema or Domain Requirements: A "Yes" in this column means you extend your Active Directory Schema before deploying this policy setting.

Ó 2009 Microsoft Corporation. All rights reserved.

Microsoft, the Windows logo, Windows, Windows Server, Windows Vista, Windows Media, Active Directory and Windows NT are either registered trademarks or trademarks of Microsoft Corporation

File Name

ActiveXInstallService.admx

ActiveXInstallService.admx

AddRemovePrograms.admx











adfs.admx

AppCompat.admx

AppCompat.admx

AppCompat.admx

AppCompat.admx

AppCompat.admx

AppCompat.admx

AppCompat.admx

AppCompat.admx

AppCompat.admx

AppCompat.admx

AttachmentManager.admx








AutoPlay.admx

AutoPlay.admx

AutoPlay.admx

AutoPlay.admx

AutoPlay.admx

AutoPlay.admx

AutoPlay.admx

AutoPlay.admx

Biometrics.admx

Biometrics.admx

Biometrics.admx

Biometrics.admx

Bits.admx

Bits.admx

Bits.admx

Bits.admx

Bits.admx

Bits.admx

Bits.admx

Bits.admx

Bits.admx

Bits.admx

Bits.admx

Bits.admx

Bits.admx

Bits.admx

Bits.admx

Bits.admx

CEIPEnable.admx

CEIPEnable.admx

CipherSuiteOrder.admx

COM.admx

COM.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

conf.admx

ControlPanel.admx

ControlPanel.admx

ControlPanel.admx

ControlPanel.admx

ControlPanelDisplay.admx


















Cpls.admx

CredentialProviders.admx

CredentialProviders.admx

CredSsp.admx

CredSsp.admx

CredSsp.admx

CredSsp.admx

CredSsp.admx

CredSsp.admx

CredSsp.admx

CredSsp.admx

CredSsp.admx

CredUI.admx

CredUI.admx

CtrlAltDel.admx

CtrlAltDel.admx

CtrlAltDel.admx

CtrlAltDel.admx

DCOM.admx

DCOM.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

Desktop.admx

DeviceInstallation.admx
























DeviceRedirection.admx

DeviceRedirection.admx

DFS.admx

DigitalLocker.admx

DigitalLocker.admx

DiskDiagnostic.admx

DiskDiagnostic.admx

DiskNVCache.admx

DiskNVCache.admx

DiskNVCache.admx

DiskNVCache.admx

DiskQuota.admx

DiskQuota.admx

DiskQuota.admx

DiskQuota.admx

DiskQuota.admx

DiskQuota.admx

DistributedLinkTracking.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DnsClient.admx

DWM.admx

DWM.admx

DWM.admx

DWM.admx

DWM.admx

DWM.admx

DWM.admx

DWM.admx

DWM.admx

DWM.admx

EncryptFilesonMove.admx

EnhancedStorage.admx







ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

ErrorReporting.admx

EventForwarding.admx

EventForwarding.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventLog.admx

EventViewer.admx

EventViewer.admx

EventViewer.admx

Explorer.admx

Explorer.admx

Explorer.admx

Explorer.admx

Explorer.admx

Explorer.admx

FileRecovery.admx

FileSys.admx

FileSys.admx

FileSys.admx

FileSys.admx

FileSys.admx

FileSys.admx

FolderRedirection.admx



FramePanes.admx

FramePanes.admx

fthsvc.admx

GameExplorer.admx

GameExplorer.admx

GameExplorer.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

Globalization.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

grouppolicy.admx

GroupPolicyPreferences.admx



































































GroupPolicy-Server.admx

Help.admx

Help.admx

Help.admx

Help.admx

HelpAndSupport.admx

HelpAndSupport.admx

HelpAndSupport.admx

HelpAndSupport.admx

HotStart.admx

HotStart.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

ICM.admx

IIS.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

inetres.admx

InkWatson.admx

InkWatson.admx

InputPersonalization.admx

InputPersonalization.admx

iSCSI.admx

iSCSI.admx

iSCSI.admx

iSCSI.admx

iSCSI.admx

iSCSI.admx

iSCSI.admx

iSCSI.admx

iSCSI.admx

iSCSI.admx

kdc.admx

kdc.admx

kerberos.admx

kerberos.admx

kerberos.admx

kerberos.admx

kerberos.admx

LanmanServer.admx

LeakDiagnostic.admx

LinkLayerTopologyDiscovery.admx

LinkLayerTopologyDiscovery.admx

Logon.admx

Logon.admx

Logon.admx

Logon.admx

Logon.admx

Logon.admx

Logon.admx

Logon.admx

Logon.admx

Logon.admx

Logon.admx

Logon.admx

Logon.admx

Logon.admx

Logon.admx

MediaCenter.admx

MediaCenter.admx

MMC.admx

MMC.admx

MMC.admx

MMC.admx

MMC.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapins.admx

MMCSnapIns2.admx

MMCSnapIns2.admx

MMCSnapIns2.admx

MMCSnapIns2.admx

MMCSnapIns2.admx

MMCSnapIns2.admx

MMCSnapIns2.admx

MMCSnapIns2.admx

MMCSnapIns2.admx

MMCSnapIns2.admx

MMCSnapIns2.admx

MobilePCMobilityCenter.admx

MobilePCMobilityCenter.admx

MobilePCPresentationSettings.admx

MobilePCPresentationSettings.admx

MSDT.admx

MSDT.admx

MSDT.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

msi.admx

Msi-FileRecovery.admx

NAPXPQec.admx

NCSI.admx

NCSI.admx

NCSI.admx

NCSI.admx

NCSI.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetLogon.admx

NetworkConnections.admx




























NetworkProjection.admx



OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

OfflineFiles.admx

P2P-pnrp.admx

P2P-pnrp.admx

P2P-pnrp.admx

P2P-pnrp.admx

P2P-pnrp.admx

P2P-pnrp.admx

P2P-pnrp.admx

P2P-pnrp.admx

P2P-pnrp.admx

P2P-pnrp.admx

P2P-pnrp.admx

P2P-pnrp.admx

P2P-pnrp.admx

P2P-pnrp.admx

ParentalControls.admx

pca.admx

pca.admx

pca.admx

pca.admx

pca.admx

pca.admx

PeerToPeerCaching.admx





PenTraining.admx

PenTraining.admx

PerfCenterCPL.admx

PerfCenterCPL.admx

PerfCenterCPL.admx

PerfCenterCPL.admx

PerfCenterCPL.admx

PerfCenterCPL.admx

PerformanceDiagnostics.admx




PerformancePerftrack.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

Power.admx

PreviousVersions.admx












Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Printing.admx

Programs.admx

Programs.admx

Programs.admx

Programs.admx

Programs.admx

Programs.admx

Programs.admx

PswdSync.admx

PswdSync.admx

PswdSync.admx

PswdSync.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

QOS.admx

RacWmiProv.admx

Radar.admx

ReAgent.admx

Reliability.admx

Reliability.admx

Reliability.admx

Reliability.admx

RemoteAssistance.admx






RemovableStorage.admx

































rpc.admx

rpc.admx

rpc.admx

rpc.admx

rpc.admx

rpc.admx

scripts.admx

scripts.admx

scripts.admx

scripts.admx

scripts.admx

scripts.admx

scripts.admx

scripts.admx

scripts.admx

scripts.admx

scripts.admx

scripts.admx

scripts.admx

sdiageng.admx

sdiageng.admx

sdiageng.admx

sdiagschd.admx

SearchOCR.admx

SearchOCR.admx

SecurityCenter.admx

Sensors.admx

Sensors.admx

Sensors.admx

Sensors.admx

Sensors.admx

Sensors.admx

ServerManager.admx

ServerManager.admx

ServerManager.admx

ServerManager.admx

Setup.admx

Setup.admx

ShapeCollector.admx

ShapeCollector.admx

SharedFolders.admx

SharedFolders.admx

Sharing.admx

Sharing.admx

Shell-CommandPrompt-RegEditTools.admx




ShellWelcomeCenter.admx

SideBar.admx

SideBar.admx

SideBar.admx

SideBar.admx

SideBar.admx

SideBar.admx

SideBar.admx

SideBar.admx

SideShow.admx

SideShow.admx

SideShow.admx

SideShow.admx

SideShow.admx

SideShow.admx

SideShow.admx

SideShow.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

SmartCard.admx

Snis.admx

Snis.admx

Snmp.admx

Snmp.admx

Snmp.admx

SoundRec.admx

SoundRec.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

StartMenu.admx

SystemResourceManager.admx




SystemRestore.admx

SystemRestore.admx

TabletPCInputPanel.admx


















TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

TabletShell.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

Taskbar.admx

TaskScheduler.admx

TaskScheduler.admx

TaskScheduler.admx

TaskScheduler.admx

TaskScheduler.admx

TaskScheduler.admx

TaskScheduler.admx

TaskScheduler.admx

TaskScheduler.admx

TaskScheduler.admx

TaskScheduler.admx

TaskScheduler.admx

TaskScheduler.admx

TaskScheduler.admx

tcpip.admx

tcpip.admx

tcpip.admx

tcpip.admx

tcpip.admx

tcpip.admx

tcpip.admx

tcpip.admx

tcpip.admx

tcpip.admx

tcpip.admx

tcpip.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

TerminalServer.admx

terminalserver-Server.admx

















Thumbnails.admx

Thumbnails.admx

Thumbnails.admx

TouchInput.admx

TouchInput.admx

TouchInput.admx

TouchInput.admx

Tpm.admx

Tpm.admx

Tpm.admx

Tpm.admx

UserDataBackup.admx

UserDataBackup.admx

UserDataBackup.admx

UserDataBackup.admx

UserDataBackup.admx

UserDataBackup.admx

UserDataBackup.admx

UserDataBackup.admx

UserDataBackup.admx

UserDataBackup.admx

UserDataBackup.admx

UserDataBackup.admx

UserDataBackup.admx

UserDataBackup.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

UserProfiles.admx

VolumeEncryption.admx
























W32Time.admx

W32Time.admx

W32Time.admx

W32Time.admx

wdi.admx

wdi.admx

WinCal.admx

WinCal.admx

WindowsAnytimeUpgrade.admx

WindowsAnytimeUpgrade.admx

WindowsBackup.admx

WindowsBackup.admx

WindowsBackup.admx

WindowsBackup.admx

WindowsBackup.admx

WindowsColorSystem.admx

WindowsColorSystem.admx

WindowsConnectNow.admx



WindowsDefender.admx







WindowsExplorer.admx






















































































WindowsFileProtection.admx




windowsfirewall.admx





























WindowsMail.admx

WindowsMail.admx

WindowsMail.admx

WindowsMail.admx

WindowsMediaDRM.admx

WindowsMediaPlayer.admx





















WindowsMessenger.admx




WindowsRemoteManagement.admx
















WindowsRemoteShell.admx







WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WindowsUpdate.admx

WinInit.admx

WinInit.admx

WinLogon.admx

WinLogon.admx

WinLogon.admx

WinLogon.admx

WinLogon.admx

WinLogon.admx

WinLogon.admx

Winsrv.admx

WordWheel.admx

Policy Setting Name Scope

ActiveX installation policy for sites in Trusted zones Machine

Approved Installation Sites for ActiveX Controls Machine

Go directly to Components Wizard User

Hide Add New Programs page User

Hide Add/Remove Windows Components page User

Hide Change or Remove Programs page User

Hide the "Add a program from CD-ROM or floppy disk" option User

Hide the "Add programs from Microsoft" option User

Hide the "Add programs from your network" option User

Hide the Set Program Access and Defaults page User

Remove Add or Remove Programs User

Remove Support Information User

Specify default category for Add New Programs User

Turn off Federation Service Machine

Prevent access to 16-bit applications Machine

Prevent access to 16-bit applications User

Remove Program Compatibility Property Page Machine

Turn off Application Compatibility Engine Machine

Turn off Application Telemetry Machine

Turn off Problem Steps Recorder Machine

Turn off Program Compatibility Assistant Machine

Turn off Program Compatibility Assistant User

Turn off Program Inventory Machine

Turn off SwitchBack Compatibility Engine Machine

Default risk level for file attachments User

Do not preserve zone information in file attachments User

Hide mechanisms to remove zone information User

Inclusion list for high risk file types User

Inclusion list for low file types User

Inclusion list for moderate risk file types User

Notify antivirus programs when opening attachments User

Trust logic for file attachments User

Default behavior for AutoRun machine

Default behavior for AutoRun user

Don't set the always do this checkbox machine

Don't set the always do this checkbox user

Turn off Autoplay machine

Turn off Autoplay user

Turn off Autoplay for non-volume devices machine

Turn off Autoplay for non-volume devices user

Allow domain users to log on using biometrics Machine

Allow the use of biometrics Machine

Allow users to log on using biometrics Machine

Timeout for fast user switching events Machine

Allow BITS Peercaching Machine

Do not allow the BITS client to use Windows Branch Cache Machine

Do not allow the computer to act as a BITS Peercaching client Machine

Do not allow the computer to act as a BITS Peercaching server Machine

Limit the age of files in the BITS Peercache Machine

Limit the BITS Peercache size Machine

Limit the maximum BITS job download time Machine

Limit the maximum network bandwidth for BITS background transfers Machine

Limit the maximum network bandwidth used for Peercaching Machine

Limit the maximum number of BITS jobs for each user Machine

Limit the maximum number of BITS jobs for this computer Machine

Limit the maximum number of files allowed in a BITS job Machine

Limit the maximum number of ranges that can be added to the file in a BITS job Machine

Set up a maintenance schedule to limit the maximum network bandwidth used for BITS background transfers Machine

Set up a work schedule to limit the maximum network bandwidth used for BITS background transfers Machine

Timeout for inactive BITS jobs Machine

Allow Corporate redirection of Customer Experience Improvement uploads Machine

Tag Windows Customer Experience Improvement data with Study Identifier Machine

SSL Cipher Suite Order Machine

Download missing COM components Machine

Download missing COM components User

Allow persisting automatic acceptance of Calls User

Disable application Sharing User

Disable Audio User

Disable Chat User

Disable Directory services User

Disable full duplex Audio User

Disable NetMeeting 2.x Whiteboard User

Disable remote Desktop Sharing Machine

Disable the Advanced Calling button User

Disable Whiteboard User

Enable Automatic Configuration User

Hide the Audio page User

Hide the General page User

Hide the Security page User

Hide the Video page User

Limit the bandwidth of Audio and Video User

Limit the size of sent files User

Prevent adding Directory servers User

Prevent Application Sharing in true color User

Prevent automatic acceptance of Calls User

Prevent changing Call placement method User

Prevent changing DirectSound Audio setting User

Prevent Control User

Prevent Desktop Sharing User

Prevent receiving files User

Prevent receiving Video User

Prevent sending files User

Prevent sending Video User

Prevent Sharing User

Prevent Sharing Command Prompts User

Prevent Sharing Explorer windows User

Prevent viewing Web directory User

Set Call Security options User

Set the intranet support Web page User

Always open All Control Panel Items when opening Control Panel User

Hide specified Control Panel items User

Prohibit access to the Control Panel User

Show only specified Control Panel items User

Disable the Display Control Panel User

Enable screen saver User

Force a specific visual style file or force Windows Classic User

Force specific screen saver User

Hide Settings tab User

Load a specific theme User

Password protect the screen saver User

Prevent changing color scheme User

Prevent changing desktop background User

Prevent changing desktop icons User

Prevent changing mouse pointers User

Prevent changing screen saver User

Prevent changing sounds User

Prevent changing theme User

Prevent changing visual style for windows and buttons User

Prevent changing window color and appearance User

Prohibit selection of visual style font size User

Screen saver timeout User

Apply the default user logon picture to all users Machine

Assign a default domain for logon Machine

Exclude credential providers Machine

Allow Delegating Default Credentials Machine

Allow Delegating Default Credentials with NTLM-only Server Authentication Machine

Allow Delegating Fresh Credentials Machine

Allow Delegating Fresh Credentials with NTLM-only Server Authentication Machine

Allow Delegating Saved Credentials Machine

Allow Delegating Saved Credentials with NTLM-only Server Authentication Machine

Deny Delegating Default Credentials Machine

Deny Delegating Fresh Credentials Machine

Deny Delegating Saved Credentials Machine

Enumerate administrator accounts on elevation Machine

Require trusted path for credential entry. Machine

Remove Change Password User

Remove Lock Computer User

Remove Logoff User

Remove Task Manager User

Allow local activation security check exemptions Machine

Define Activation Security Check exemptions Machine

Add/Delete items User

Allow only bitmapped wallpaper User

Desktop Wallpaper User

Disable Active Desktop User

Disable all items User

Do not add shares of recently opened documents to Network Locations User

Don't save settings at exit User

Enable Active Desktop User

Enable filter in Find dialog box User

Hide Active Directory folder User

Hide and disable all items on the desktop User

Hide Internet Explorer icon on desktop User

Hide Network Locations icon on desktop User

Maximum size of Active Directory searches User

Prevent adding, dragging, dropping and closing the Taskbar's toolbars User

Prohibit adding items User

Prohibit adjusting desktop toolbars User

Prohibit changes User

Prohibit closing items User

Prohibit deleting items User

Prohibit editing items User

Prohibit User from manually redirecting Profile Folders User

Remove Computer icon on the desktop User

Remove My Documents icon on the desktop User

Remove Properties from the Computer icon context menu User

Remove Properties from the Documents icon context menu User

Remove Properties from the Recycle Bin context menu User

Remove Recycle Bin icon from desktop User

Remove the Desktop Cleanup Wizard User

Turn off Aero Shake window minimizing mouse gesture User

Allow administrators to override Device Installation Restriction policies Machine

Allow installation of devices that match any of these device IDs Machine

Allow installation of devices using drivers that match these device setup classes Machine

Allow non-administrators to install drivers for these device setup classes Machine

Allow remote access to the Plug and Play interface Machine

Code signing for device drivers User

Configure device installation time-out Machine

Configure driver search locations User

Display a custom message title when device installation is prevented by a policy setting Machine

Display a custom message when installation is prevented by a policy setting Machine

Do not send a Windows error report when a generic driver is installed on a device Machine

Prevent creation of a system restore point during device activity that would normally prompt creation of a restore point Machine

Prevent device metadata retrieval from the Internet Machine

Prevent installation of devices not described by other policy settings Machine

Prevent installation of devices that match any of these device IDs Machine

Prevent installation of devices using drivers that match these device setup classes Machine

Prevent installation of removable devices Machine

Prevent Windows from sending an error report when a device driver requests additional software during installation Machine

Prioritize all digitally signed drivers equally during the driver ranking and selection process Machine

Specify search order for device driver source locations Machine

Time (in seconds) to force reboot when required for policy changes to take effect Machine

Turn off "Found New Hardware" balloons during device installation Machine

Turn off Windows Update device driver search prompt Machine

Turn off Windows Update device driver search prompt User

Prevent redirection of devices that match any of these device Ids Machine

Prevent redirection of USB devices Machine

Sets how often a DFS Client discovers DC's Machine

Do not allow Digital Locker to run Machine

Do not allow Digital Locker to run User

Disk Diagnostic: Configure custom alert text Machine

Disk Diagnostic: Configure execution level Machine

Turn Off Boot and Resume Optimizations Machine

Turn Off Cache Power Mode Machine

Turn Off Non Volatile Cache Feature Machine

Turn Off Solid State Mode Machine

Apply policy to removable media Machine

Default quota limit and warning level Machine

Enable disk quotas Machine

Enforce disk quota limit Machine

Log event when quota limit exceeded Machine

Log event when quota warning level exceeded Machine

Allow Distributed Link Tracking clients to use domain resources Machine

Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries Machine

Connection-Specific DNS Suffix Machine

DNS Servers Machine

DNS Suffix Search List Machine

Dynamic Update Machine

Primary DNS Suffix Machine

Primary DNS Suffix Devolution Machine

Primary DNS Suffix Devolution Level Machine

Register DNS records with connection-specific DNS suffix Machine

Register PTR Records Machine

Registration Refresh Interval Machine

Replace Addresses In Conflicts Machine

TTL Set in the A and PTR records Machine

Turn off Multicast Name Resolution Machine

Update Security Level Machine

Update Top Level Domain Zones Machine

Do not allow color changes Machine

Do not allow color changes User

Do not allow desktop composition Machine

Do not allow desktop composition User

Do not allow Flip3D invocation Machine

Do not allow Flip3D invocation User

Do not allow window animations Machine

Do not allow window animations User

Specify a default color Machine

Specify a default color User

Do not automatically encrypt files moved to encrypted folders Machine

Allow Enhanced Storage certificate provisioning Machine

Allow only USB root hub connected Enhanced Storage devices Machine

Configure list of Enhanced Storage devices usable on your computer Machine

Configure list of IEEE 1667 silos usable on your computer Machine

Do not allow non-Enhanced Storage removable devices Machine

Do not allow password authentication of Enhanced Storage devices Machine

Lock Enhanced Storage when the computer is locked Machine

Configure Corporate Windows Error Reporting Machine

Configure Default consent Machine

Configure Default consent User

Configure Error Reporting Machine

Configure Report Archive Machine

Configure Report Archive User

Configure Report Queue Machine

Configure Report Queue User

Customize consent settings Machine

Customize consent settings User

Default application reporting settings Machine

Disable Logging Machine

Disable Logging User

Disable Windows Error Reporting Machine

Disable Windows Error Reporting User

Display Error Notification Machine

Do not send additional data Machine

Do not send additional data User

Ignore custom consent settings Machine

Ignore custom consent settings User

List of applications to always report errors for Machine

List of applications to be excluded Machine

List of applications to be excluded User

List of applications to never report errors for Machine

Prevent display of the user interface for critical errors Machine

Report operating system errors Machine

Configure the server address, refresh interval, and issuer certificate authority of a target Subscription Manager Machine

ForwarderResourceUsage Machine

Backup log automatically when full Machine




Log Access Machine

Log Access Machine

Log Access Machine

Log Access Machine

Log File Path Machine




Maximum Log Size (KB) Machine




Retain old events Machine




Turn on logging Machine

Events.asp program Machine

Events.asp program command line parameters Machine

Events.asp URL Machine

Display the menu bar in Windows Explorer User

Prevent users from adding files to the root of their Users Files folder. User

Set a support web page link Machine

Turn off common control and window animations User

Turn off Data Execution Prevention for Explorer Machine

Turn off heap termination on corruption Machine

Configure Corrupted File Recovery Behavior Machine

Disable delete notifications on all volumes Machine

Do not allow compression on all NTFS volumes Machine

Do not allow encryption on all NTFS volumes Machine

Enable NTFS pagefile encryption Machine

Selectively allow the evaluation of a symbolic link Machine

Short name creation options Machine

Do not automatically make redirected folders available offline User

Use localized subfolder names when redirecting Start Menu and My Documents Machine

Use localized subfolder names when redirecting Start Menu and My Documents User

Turn off Details Pane User

Turn off Preview Pane User

Configure Scenario Execution Level Machine

Turn off downloading of game information Machine

Turn off game updates Machine

Turn off tracking of last play time of games in the Games folder Machine

Century interpretation for Year 2000 User

Disallow changing of geographic location Machine

Disallow changing of geographic location User

Disallow selection of Custom Locales Machine

Disallow selection of Custom Locales User

Disallow user override of locale settings Machine

Disallow user override of locale settings User

Force selected system UI language to overwrite the user UI language Machine

Hide Regional and Language Options administrative options User

Hide the geographic location option User

Hide the select language group options User

Hide user locale selection and customization options User

Restrict selection of Windows menus and dialogs language User

Restrict system locales Machine

Restrict user locales Machine

Restrict user locales User

Restricts the UI language Windows uses for all logged users Machine

Restricts the UI languages Windows should use for the selected user User

Allow Cross-Forest User Policy and Roaming User Profiles Machine

Always use local ADM files for Group Policy Object Editor Machine

Create new Group Policy object links disabled by default User

Default name for new Group Policy objects User

Disallow Interactive Users from generating Resultant Set of Policy data Machine

Disallow Interactive Users from generating Resultant Set of Policy data User

Disk Quota policy processing Machine

EFS recovery policy processing Machine

Enforce Show Policies Only User

Folder Redirection policy processing Machine

Group Policy domain controller selection User

Group Policy refresh interval for computers Machine

Group Policy refresh interval for domain controllers Machine

Group Policy refresh interval for users User

Group Policy slow link detection Machine

Group Policy slow link detection User

Internet Explorer Maintenance policy processing Machine

IP Security policy processing Machine

Registry policy processing Machine

Remove users ability to invoke machine policy refresh Machine

Scripts policy processing Machine

Security policy processing Machine

Software Installation policy processing Machine

Startup policy processing wait time Machine

Turn off automatic update of ADM files User

Turn off background refresh of Group Policy Machine

Turn off Local Group Policy objects processing Machine

Turn off Resultant Set of Policy logging Machine

User Group Policy loopback processing mode Machine

Wired policy processing Machine

Wireless policy processing Machine

Applications preference extension policy processing Machine

Configure Applications preference logging and tracing Machine

Configure Data Sources preference logging and tracing Machine

Configure Devices preference logging and tracing Machine

Configure Drive Maps preference logging and tracing Machine

Configure Environment preference logging and tracing Machine

Configure Files preference logging and tracing Machine

Configure Folder Options preference logging and tracing Machine

Configure Folders preference logging and tracing Machine

Configure Ini Files preference logging and tracing Machine

Configure Internet Settings preference logging and tracing Machine

Configure Local Users and Groups preference logging and tracing Machine

Configure Network Options preference logging and tracing Machine

Configure Network Shares preference logging and tracing Machine

Configure Power Options preference logging and tracing Machine

Configure Printers preference logging and tracing Machine

Configure Regional Options preference logging and tracing Machine

Configure Registry preference logging and tracing Machine

Configure Scheduled Tasks preference logging and tracing Machine

Configure Services preference logging and tracing Machine

Configure Shortcuts preference logging and tracing Machine

Configure Start Menu preference logging and tracing Machine

Data Sources preference extension policy processing Machine

Devices preference extension policy processing Machine

Drive Maps preference extension policy processing Machine

Environment preference extension policy processing Machine

Files preference extension policy processing Machine

Folder Options preference extension policy processing Machine

Folders preference extension policy processing Machine

Ini Files preference extension policy processing Machine

Internet Settings preference extension policy processing Machine

Local Users and Groups preference extension policy processing Machine

Network Options preference extension policy processing Machine

Network Shares preference extension policy processing Machine

Permit use of Application snap-ins User

Permit use of Applications preference extension User

Permit use of Control Panel Settings (Computers) User

Permit use of Control Panel Settings (Users) User

Permit use of Data Sources preference extension User

Permit use of Devices preference extension User

Permit use of Drive Maps preference extension User

Permit use of Environment preference extension User

Permit use of Files preference extension User

Permit use of Folder Options preference extension User

Permit use of Folders preference extension User

Permit use of Ini Files preference extension User

Permit use of Internet Settings preference extension User

Permit use of Local Users and Groups preference extension User

Permit use of Network Options preference extension User

Permit use of Network Shares preference extension User

Permit use of Power Options preference extension User

Permit use of Preferences tab User

Permit use of Printers preference extension User

Permit use of Regional Options preference extension User

Permit use of Registry preference extension User

Permit use of Scheduled Tasks preference extension User

Permit use of Services preference extension User

Permit use of Shortcuts preference extension User

Permit use of Start Menu preference extension User

Power Options preference extension policy processing Machine

Printers preference extension policy processing Machine

Regional Options preference extension policy processing Machine

Registry preference extension policy processing Machine

Scheduled Tasks preference extension policy processing Machine

Services preference extension policy processing Machine

Shortcuts preference extension policy processing Machine

Start Menu preference extension policy processing Machine

Allow asynchronous user Group Policy processing when logging on through Remote Desktop Services Machine

Restrict potentially unsafe HTML Help functions to specified folders Machine

Restrict these programs from being launched from Help Machine

Restrict these programs from being launched from Help User

Turn off Data Execution Prevention for HTML Help Executible Machine

Turn off Active Help Machine

Turn off Help Experience Improvement Program User

Turn off Help Ratings User

Turn off Windows Online User

Turn off Windows HotStart Machine

Turn off Windows HotStart User

Restrict Internet communication Machine

Restrict Internet communication User

Turn off access to all Windows Update features Machine

Turn off Automatic Root Certificates Update Machine

Turn off downloading of print drivers over HTTP Machine

Turn off downloading of print drivers over HTTP User

Turn off Event Viewer "Events.asp" links Machine

Turn off Help and Support Center "Did you know?" content Machine

Turn off Help and Support Center Microsoft Knowledge Base search Machine

Turn off Internet Connection Wizard if URL connection is referring to Microsoft.com Machine

Turn off Internet download for Web publishing and online ordering wizards Machine

Turn off Internet download for Web publishing and online ordering wizards User

Turn off Internet File Association service Machine

Turn off Internet File Association service User

Turn off printing over HTTP Machine

Turn off printing over HTTP User

Turn off Registration if URL connection is referring to Microsoft.com Machine

Turn off Search Companion content file updates Machine

Turn off the "Order Prints" picture task Machine

Turn off the "Order Prints" picture task User

Turn off the "Publish to Web" task for files and folders Machine

Turn off the "Publish to Web" task for files and folders User

Turn off the Windows Messenger Customer Experience Improvement Program Machine

Turn off the Windows Messenger Customer Experience Improvement Program User

Turn off Windows Customer Experience Improvement Program Machine

Turn off Windows Error Reporting Machine

Turn off Windows Network Connectivity Status Indicator active tests Machine

Turn off Windows Update device driver searching Machine

Prevent IIS installation Machine

Access data sources across domains Machine










Access data sources across domains User










Add a specific list of search providers to the user's search provider list Machine

Add a specific list of search providers to the user's search provider list User

Add-on List Machine

Add-on List User

Admin-approved behaviors Machine

Admin-approved behaviors User

All Processes Machine














All Processes User

All Processes User

All Processes User

All Processes User

All Processes User

All Processes User

All Processes User

All Processes User

All Processes User

All Processes User

All Processes User

All Processes User

All Processes User

All Processes User

Allow active content from CDs to run on user machines Machine

Allow active content from CDs to run on user machines User

Allow active content over restricted protocols to access my computer Machine





Allow active content over restricted protocols to access my computer User





Allow active scripting Machine










Allow active scripting User










Allow binary and script behaviors Machine










Allow binary and script behaviors User










Allow cut, copy or paste operations from the clipboard via script Machine










Allow cut, copy or paste operations from the clipboard via script User










Allow drag and drop or copy and paste files Machine










Allow drag and drop or copy and paste files User










Allow file downloads Machine










Allow file downloads User










Allow font downloads Machine










Allow font downloads User










Allow Install On Demand (except Internet Explorer) Machine

Allow Install On Demand (except Internet Explorer) User

Allow Install On Demand (Internet Explorer) Machine

Allow Install On Demand (Internet Explorer) User

Allow installation of desktop items Machine










Allow installation of desktop items User










Allow META REFRESH Machine










Allow META REFRESH User










Allow scripting of Internet Explorer web browser control Machine










Allow scripting of Internet Explorer web browser control User










Allow script-initiated windows without size or position constraints Machine










Allow script-initiated windows without size or position constraints User










Allow Scriptlets Machine










Allow Scriptlets User










Allow software to run or install even if the signature is invalid Machine

Allow software to run or install even if the signature is invalid User

Allow status bar updates via script Machine










Allow status bar updates via script User










Allow the display of image download placeholders User

Allow the printing of background colors and images User

Allow third-party browser extensions Machine

Allow third-party browser extensions User

Allow video and animation on a Web page that uses a legacy media player Machine










Allow video and animation on a Web page that uses a legacy media player User










Allow websites to open windows without address or status bars Machine










Allow websites to open windows without address or status bars User










Allow websites to prompt for information using scripted windows Machine










Allow websites to prompt for information using scripted windows User










Audio/Video Player User

Auto-hide the Toolbars machine

Auto-hide the Toolbars user

Automatic prompting for ActiveX controls Machine










Automatic prompting for ActiveX controls User










Automatic prompting for file downloads Machine










Automatic prompting for file downloads User










Automatically check for Internet Explorer updates Machine

Automatically check for Internet Explorer updates User

Carpoint User

Check for server certificate revocation Machine

Check for server certificate revocation User

Check for signatures on downloaded programs Machine

Check for signatures on downloaded programs User

Configure Delete Browsing History on exit machine

Configure Delete Browsing History on exit user

Configure Media Explorer Bar User

Configure new tab page default behavior Machine

Configure new tab page default behavior User

Configure Outlook Express User

Configure Toolbar Buttons User

Customize Command Labels Machine

Customize Command Labels User

Customize User Agent String Machine

Customize User Agent String User

Deny all add-ons unless specifically allowed in the Add-on List Machine

Deny all add-ons unless specifically allowed in the Add-on List User

Deploy default Accelerators Machine

Deploy default Accelerators User

Deploy non-default Accelerators Machine

Deploy non-default Accelerators User

DHTML Edit Control User

Disable "Configuring History" Machine

Disable "Configuring History" User

Disable .NET Framework Setup Machine










Disable .NET Framework Setup User










Disable adding channels User

Disable adding schedules for offline pages User

Disable all scheduled offline pages User

Disable AutoComplete for forms User

Disable Automatic Install of Internet Explorer components Machine

Disable caching of Auto-Proxy scripts User

Disable changing accessibility settings User

Disable changing Advanced page settings User

Disable changing Automatic Configuration settings Machine

Disable changing Automatic Configuration settings User

Disable changing Calendar and Contact settings User

Disable changing certificate settings User

Disable changing color settings User

Disable changing connection settings Machine

Disable changing connection settings User

Disable changing default browser check User

Disable changing font settings User

Disable changing home page settings User

Disable changing language settings User

Disable changing link color settings User

Disable changing Messaging settings User

Disable changing Profile Assistant settings User

Disable changing proxy settings Machine

Disable changing proxy settings User

Disable changing ratings settings User

Disable changing secondary home page settings User

Disable changing Temporary Internet files settings User

Disable channel user interface completely User

Disable Context menu User

Disable customizing browser toolbar buttons User

Disable customizing browser toolbars User

Disable downloading of site subscription content User

Disable editing and creating of schedule groups User

Disable editing schedules for offline pages User

Disable external branding of Internet Explorer User

Disable Import/Export Settings wizard User

Disable Internet Connection wizard User

Disable offline page hit logging User

Disable Open in New Window menu option User

Disable Periodic Check for Internet Explorer software updates Machine

Disable Per-User Installation of ActiveX Controls Machine

Disable Per-User Installation of ActiveX Controls User

Disable removing channels User

Disable removing schedules for offline pages User

Disable Save this program to disk option User

Disable showing the splash screen Machine

Disable software update shell notifications on program launch Machine

Disable the Advanced page Machine

Disable the Advanced page User

Disable the Connections page Machine

Disable the Connections page User

Disable the Content page Machine

Disable the Content page User

Disable the General page Machine

Disable the General page User

Disable the Privacy page Machine

Disable the Privacy page User

Disable the Programs page Machine

Disable the Programs page User

Disable the Reset Web Settings feature User

Disable the Security page Machine

Disable the Security page User

Disable toolbars and extensions when InPrivate Browsing starts Machine

Disable toolbars and extensions when InPrivate Browsing starts User

Display error message on proxy script download failure User

Display mixed content Machine










Display mixed content User










Do not allow resetting Internet Explorer settings Machine

Do not allow resetting Internet Explorer settings User

Do not allow users to enable or disable add-ons Machine

Do not allow users to enable or disable add-ons User

Do not collect InPrivate Filtering data Machine

Do not collect InPrivate Filtering data User

Do not prompt for client certificate selection when no certificates or only one certificate exists. Machine










Do not prompt for client certificate selection when no certificates or only one certificate exists. User










Do not save encrypted pages to disk Machine

Do not save encrypted pages to disk User

Download signed ActiveX controls Machine










Download signed ActiveX controls User










Download unsigned ActiveX controls Machine










Download unsigned ActiveX controls User










Empty Temporary Internet Files folder when browser is closed Machine

Empty Temporary Internet Files folder when browser is closed User

Enable Native XMLHttpRequest Support Machine

Enable Native XMLHttpRequest Support User

Enforce Full Screen Mode Machine

Enforce Full Screen Mode User

File menu: Disable closing the browser and Explorer windows User

File menu: Disable New menu option User

File menu: Disable Open menu option User

File menu: Disable Save As Web Page Complete User

File menu: Disable Save As... menu option User

File size limits for Internet zone User

File size limits for Intranet zone User

File size limits for Local Machine zone User

File size limits for Restricted Sites zone User

File size limits for Trusted Sites zone User

Help menu: Remove 'For Netscape Users' menu option User

Help menu: Remove 'Send Feedback' menu option User

Help menu: Remove 'Tip of the Day' menu option User

Help menu: Remove 'Tour' menu option User

Hide Favorites menu User

Hide the Command Bar Machine

Hide the Command Bar User

Hide the Status Bar Machine

Hide the Status Bar User

Identity Manager: Prevent users from using Identities User

Include local directory path when uploading files to a server Machine










Include local directory path when uploading files to a server User










Include updated Web site lists from Microsoft Machine

Include updated Web site lists from Microsoft User

Initialize and script ActiveX controls not marked as safe Machine










Initialize and script ActiveX controls not marked as safe User










InPrivate Filtering Threshold Machine

InPrivate Filtering Threshold User

Internet Explorer Processes Machine













Internet Explorer Processes User













Internet Zone Restricted Protocols Machine

Internet Zone Restricted Protocols User

Internet Zone Template Machine

Internet Zone Template User

Intranet Sites: Include all local (intranet) sites not listed in other zones Machine

Intranet Sites: Include all local (intranet) sites not listed in other zones User

Intranet Sites: Include all network paths (UNCs) Machine

Intranet Sites: Include all network paths (UNCs) User

Intranet Sites: Include all sites that bypass the proxy server Machine

Intranet Sites: Include all sites that bypass the proxy server User

Intranet Zone Restricted Protocols Machine

Intranet Zone Restricted Protocols User

Intranet Zone Template Machine

Intranet Zone Template User

Investor User

Java permissions Machine










Java permissions User










Launching applications and files in an IFRAME Machine










Launching applications and files in an IFRAME User










Launching programs and unsafe files Machine










Launching programs and unsafe files User










Local Machine Zone Restricted Protocols Machine

Local Machine Zone Restricted Protocols User

Local Machine Zone Template Machine

Local Machine Zone Template User

Lock all Toolbars Machine

Lock all Toolbars User

Locked-Down Internet Zone Template Machine

Locked-Down Internet Zone Template User

Locked-Down Intranet Zone Template Machine

Locked-Down Intranet Zone Template User

Locked-Down Local Machine Zone Template Machine

Locked-Down Local Machine Zone Template User

Locked-Down Restricted Sites Zone Template Machine

Locked-Down Restricted Sites Zone Template User

Locked-Down Trusted Sites Zone Template Machine

Locked-Down Trusted Sites Zone Template User

Logon options Machine










Logon options User

Logon options User

Logon options User

Logon options User

Logon options User

Logon options User

Logon options User

Logon options User

Logon options User

Logon options User

Loose XAML files Machine










Loose XAML files User










Make proxy settings per-machine (rather than per-user) Machine

Maximum number of connections per server (HTTP 1.0) Machine

Maximum number of connections per server (HTTP 1.0) User

Maximum number of connections per server (HTTP 1.1) Machine

Maximum number of connections per server (HTTP 1.1) User

Menu Controls User

Microsoft Agent User

Microsoft Chat User

Microsoft Scriptlet Component User

Microsoft Survey Control User

Moving the menu bar above the navigation bar User

MSNBC User

Navigate windows and frames across different domains Machine










Navigate windows and frames across different domains User










NetShow File Transfer Control User

Only allow approved domains to use ActiveX controls without prompt machine










Only allow approved domains to use ActiveX controls without prompt user










Only use the ActiveX Installer Service for installation of ActiveX Controls Machine

Only use the ActiveX Installer Service for installation of ActiveX Controls User

Open files based on content, not file extension Machine










Open files based on content, not file extension User










Play animations in web pages Machine

Play animations in web pages User

Play sounds in web pages Machine

Play sounds in web pages User

Play videos in web pages Machine

Play videos in web pages User

Pop-up allow list Machine

Pop-up allow list User

Prevent "Fix settings" functionality Machine

Prevent "Fix settings" functionality User

Prevent Bypassing SmartScreen Filter Warnings Machine

Prevent Bypassing SmartScreen Filter Warnings User

Prevent configuration of search from the Address bar User

Prevent Deleting Cookies Machine

Prevent Deleting Cookies User

Prevent Deleting Favorites Site Data Machine

Prevent Deleting Favorites Site Data User

Prevent Deleting Form Data Machine

Prevent Deleting Form Data User

Prevent Deleting InPrivate Filtering data Machine

Prevent Deleting InPrivate Filtering data User

Prevent Deleting Passwords Machine

Prevent Deleting Passwords User

Prevent Deleting Temporary Internet Files Machine

Prevent Deleting Temporary Internet Files User

Prevent Deleting Web sites that the User has Visited Machine

Prevent Deleting Web sites that the User has Visited User

Prevent ignoring certificate errors Machine

Prevent ignoring certificate errors User

Prevent Internet Explorer Search box from displaying Machine

Prevent Internet Explorer Search box from displaying User

Prevent participation in the Customer Experience Improvement Program Machine

Prevent participation in the Customer Experience Improvement Program User

Prevent performance of First Run Customize settings Machine

Prevent performance of First Run Customize settings User

Prevent setting of the code download path for each machine Machine

Prevent the configuration of cipher strength update information URLs Machine

Prevent the deletion of temporary Internet files and cookies Machine

Prevent the deletion of temporary Internet files and cookies User

Prevent the use of Windows colors User

Prevent users from choosing default text size User

Prevent users from configuring background color User

Prevent users from configuring text color User

Prevent users from configuring the color of links that have already been clicked User

Prevent users from configuring the color of links that have not yet been clicked User

Prevent users from configuring the hover color User

Process List Machine














Process List User

Process List User

Process List User

Process List User

Process List User

Process List User

Process List User

Process List User

Process List User

Process List User

Process List User

Process List User

Process List User

Process List User

Restrict changing the default search provider Machine

Restrict changing the default search provider User

Restrict search providers to a specific list of providers Machine

Restrict search providers to a specific list of providers User

Restricted Sites Zone Restricted Protocols Machine

Restricted Sites Zone Restricted Protocols User

Restricted Sites Zone Template Machine

Restricted Sites Zone Template User

Run .NET Framework-reliant components not signed with Authenticode Machine










Run .NET Framework-reliant components not signed with Authenticode User










Run .NET Framework-reliant components signed with Authenticode Machine










Run .NET Framework-reliant components signed with Authenticode User










Run ActiveX controls and plugins Machine










Run ActiveX controls and plugins User










Script ActiveX controls marked safe for scripting Machine










Script ActiveX controls marked safe for scripting User










Scripting of Java applets Machine










Scripting of Java applets User










Search: Disable Find Files via F3 within the browser User

Search: Disable Search Customization User

Security Zones: Do not allow users to add/delete sites Machine

Security Zones: Do not allow users to change policies Machine

Security Zones: Use only machine settings Machine

Send internationalized domain names Machine

Send internationalized domain names User

Set location of Stop and Refresh buttons Machine

Set location of Stop and Refresh buttons User

Set tab process growth machine

Set tab process growth user

Shockwave Flash User

Site to Zone Assignment List Machine

Site to Zone Assignment List User

Software channel permissions Machine










Software channel permissions User










Submit non-encrypted form data Machine










Submit non-encrypted form data User










Subscription Limits User

Tools menu: Disable Internet Options... menu option User

Trusted Sites Zone Restricted Protocols Machine

Trusted Sites Zone Restricted Protocols User

Trusted Sites Zone Template Machine

Trusted Sites Zone Template User

Turn off "Delete Browsing History" functionality Machine

Turn off "Delete Browsing History" functionality User

Turn off Accelerators Machine

Turn off Accelerators User

Turn off ActiveX opt-in prompt Machine

Turn off ActiveX opt-in prompt User

Turn off addition and removal of feeds and Web Slices Machine

Turn off addition and removal of feeds and Web Slices User

Turn off Automatic Crash Recovery Prompt Machine

Turn off Automatic Crash Recovery Prompt User

Turn off automatic image resizing User

Turn off background sync for feeds and Web Slices Machine

Turn off background sync for feeds and Web Slices User

Turn off changing the URL to be displayed for checking updates to Internet Explorer and Internet Tools Machine

Turn off ClearType Machine

Turn off ClearType User

Turn off Compatibility View Machine

Turn off Compatibility View User

Turn off Compatibility View button Machine

Turn off Compatibility View button User

Turn off configuration of default behavior of new tab creation Machine

Turn off configuration of default behavior of new tab creation User

Turn off configuration of tabbed browsing pop-up behavior Machine

Turn off configuration of tabbed browsing pop-up behavior User

Turn off configuration of window reuse Machine

Turn off configuration of window reuse User

Turn off configuring the update check interval (in days) Machine

Turn off configuring underline links User

Turn off Crash Detection Machine

Turn off Crash Detection User

Turn off Cross Document Messaging Machine

Turn off Cross Document Messaging User

Turn off Data Execution Prevention Machine

Turn off Data URI Support Machine

Turn off Data URI Support User

Turn off Developer Tools Machine

Turn off Developer Tools User

Turn off displaying the Internet Explorer Help Menu Machine

Turn off displaying the Internet Explorer Help Menu User

Turn off downloading of enclosures Machine

Turn off downloading of enclosures User

Turn off Encryption Support Machine

Turn off Encryption Support User

Turn off Favorites bar Machine

Turn off Favorites bar User

Turn off feed and Web Slices discovery Machine

Turn off feed and Web Slices discovery User

Turn Off First-Run Opt-In Machine










Turn Off First-Run Opt-In User










Turn off friendly http error messages User

Turn off inline AutoComplete in Windows Explorer User

Turn off InPrivate Browsing Machine

Turn off InPrivate Browsing User

Turn off InPrivate Filtering Machine

Turn off InPrivate Filtering User

Turn off Managing Phishing filter Machine

Turn off Managing Phishing filter User

Turn off Managing Pop-up Allow list Machine

Turn off Managing Pop-up Allow list User

Turn off managing Pop-up filter level Machine

Turn off managing Pop-up filter level User

Turn off Managing SmartScreen Filter Machine

Turn off Managing SmartScreen Filter User

Turn off page transitions User

Turn off page zooming functionality Machine

Turn off page zooming functionality User

Turn off picture display User

Turn off pop-up management Machine

Turn off pop-up management User

Turn off Print Menu User

Turn off Profile Assistant Machine

Turn off Profile Assistant User

Turn off Quick Tabs functionality Machine

Turn off Quick Tabs functionality User

Turn off Reopen Last Browsing Session machine

Turn off Reopen Last Browsing Session user

Turn off sending URLs as UTF-8 (requires restart) User

Turn off smart image dithering User

Turn off smooth scrolling User

Turn off suggestions for all user-installed providers Machine

Turn off suggestions for all user-installed providers User

Turn off Tab Grouping User

Turn off tabbed browsing Machine

Turn off tabbed browsing User

Turn off the activation of the quick pick menu Machine

Turn off the activation of the quick pick menu User

Turn off the auto-complete feature for web addresses machine

Turn off the auto-complete feature for web addresses user

Turn off the feed list Machine

Turn off the feed list User

Turn off the Security Settings Check feature Machine

Turn off the Security Settings Check feature User

Turn off the XDomainRequest Object Machine

Turn off the XDomainRequest Object User

Turn off toolbar upgrade tool Machine

Turn off toolbar upgrade tool User

Turn off Windows Search AutoComplete Machine

Turn off Windows Search AutoComplete User

Turn on automatic detection of the intranet Machine

Turn on automatic detection of the intranet User

Turn on Automatic Signup User

Turn on Basic feed authentication over HTTP Machine

Turn on Basic feed authentication over HTTP User

Turn on Caret Browsing support Machine

Turn on Caret Browsing support User

Turn on Compatibility Logging Machine

Turn on Compatibility Logging User

Turn on Cross-Site Scripting (XSS) Filter machine










Turn on Cross-Site Scripting (XSS) Filter user










Turn on Information bar notification for intranet content Machine

Turn on Information bar notification for intranet content User

Turn on inline AutoComplete for Web addresses User

Turn on Internet Explorer 7 Standards Mode Machine

Turn on Internet Explorer 7 Standards Mode User

Turn on Internet Explorer Standards Mode for Local Intranet Machine

Turn on Internet Explorer Standards Mode for Local Intranet User

Turn on menu bar by default Machine

Turn on menu bar by default User

Turn on Protected Mode Machine










Turn on Protected Mode User










Turn on script debugging User

Turn on Suggested Sites User

Turn on the auto-complete feature for user names and passwords on forms User

Turn on the display of a notification about every script error User

Turn on the hover color option User

Turn on the Internet Connection Wizard Auto Detect User

Turn on Warn about Certificate Address Mismatch Machine

Turn on Warn about Certificate Address Mismatch User

Use Automatic Detection for dial-up connections User

Use HTTP 1.1 Machine

Use HTTP 1.1 User

Use HTTP 1.1 through proxy connections Machine

Use HTTP 1.1 through proxy connections User

Use large Icons for Command Buttons Machine

Use large Icons for Command Buttons User

Use Policy Accelerators Machine

Use Policy Accelerators User

Use Policy List of Internet Explorer 7 sites Machine

Use Policy List of Internet Explorer 7 sites User

Use Pop-up Blocker Machine










Use Pop-up Blocker User










Use SmartScreen Filter Machine










Use SmartScreen Filter User










Use UTF-8 for mailto links Machine

Use UTF-8 for mailto links User

Userdata persistence Machine










Userdata persistence User










View menu: Disable Full Screen menu option User

View menu: Disable Source menu option User

Web sites in less privileged Web content zones can navigate into this zone Machine










Web sites in less privileged Web content zones can navigate into this zone User










XAML browser applications Machine










XAML browser applications User










XPS documents Machine










XPS documents User

XPS documents User

XPS documents User

XPS documents User

XPS documents User

XPS documents User

XPS documents User

XPS documents User

XPS documents User

XPS documents User

Turn off handwriting recognition error reporting Machine

Turn off handwriting recognition error reporting User

Turn off automatic learning Machine

Turn off automatic learning User

Do not allow adding new targets via manual configuration Machine

Do not allow additional session logins Machine

Do not allow changes to initiator CHAP secret Machine

Do not allow changes to initiator iqn name Machine

Do not allow connections without IPSec Machine

Do not allow manual configuration of discovered targets Machine

Do not allow manual configuration of iSNS servers Machine

Do not allow manual configuration of target portals Machine

Do not allow sessions without mutual CHAP Machine

Do not allow sessions without one way CHAP Machine

Provide information about previous logons to client computers Machine

Use forest search order Machine

Define host name-to-Kerberos realm mappings Machine

Define interoperable Kerberos V5 realm settings Machine

Require strict KDC validation Machine

Require strict target SPN match on remote procedure calls Machine

Use forest search order Machine

Hash Publication for BranchCache Machine


Turn on Mapper I/O (LLTDIO) driver Machine

Turn on Responder (RSPNDR) driver Machine

Always use classic logon Machine

Always use custom logon background Machine

Always wait for the network at computer startup and logon Machine

Do not process the legacy run list Machine

Do not process the legacy run list User

Do not process the run once list Machine

Do not process the run once list User

Don't display the Getting Started welcome screen at logon Machine

Don't display the Getting Started welcome screen at logon User

Hide entry points for Fast User Switching Machine

Remove Boot / Shutdown / Logon / Logoff status messages Machine

Run these programs at user logon Machine

Run these programs at user logon User

Turn off Windows Startup Sound Machine

Verbose vs normal status messages Machine

Do not allow Windows Media Center to run Machine

Do not allow Windows Media Center to run User

ActiveX Control User

Extended View (Web View) User

Link to Web Address User

Restrict the user from entering author mode User

Restrict users to the explicitly permitted list of snap-ins User

.Net Framework Configuration User

Active Directory Domains and Trusts User

Active Directory Sites and Services User

Active Directory Users and Computers User

Administrative Templates (Computers) User

Administrative Templates (Computers) User

Administrative Templates (Users) User

Administrative Templates (Users) User

ADSI Edit User

AppleTalk Routing User

Authorization Manager User

Certificate Templates User

Certificates User

Certification Authority User

Certification Authority Policy Settings User

Component Services User

Computer Management User

Connection Sharing (NAT) User

DCOM Configuration Extension User

Device Manager User

Device Manager User

DHCP Relay Management User

Disk Defragmenter User

Disk Management User

Distributed File System User

Enterprise PKI User

Event Viewer User

Event Viewer User

Event Viewer (Windows Vista) User

Event Viewer (Windows Vista) User

Failover Clusters Manager User

FAX Service User

Folder Redirection User

Folder Redirection User

FrontPage Server Extensions User

Group Policy Management User

Group Policy Object Editor User

Group Policy tab for Active Directory Tools User

Health Registration Authority (HRA) User

IAS Logging User

IGMP Routing User

Indexing Service User

Internet Authentication Service (IAS) User

Internet Explorer Maintenance User

Internet Explorer Maintenance User

Internet Information Services User

IP Routing User

IP Security Monitor User

IP Security Policy Management User

IP Security Policy Management User

IPX RIP Routing User

IPX Routing User

IPX SAP Routing User

Local Users and Groups User

Logical and Mapped Drives User

NAP Client Configuration User

NAP Client Configuration User

Network Policy Server (NPS) User

Online Responder User

OSPF Routing User

Performance Logs and Alerts User

Public Key Policies User

QoS Admission Control User

RAS Dialin - User Node User

Remote Access User

Remote Desktop Services Configuration User

Remote Desktops User

Remote Installation Services User

Removable Storage User

Removable Storage Management User

Resultant Set of Policy snap-in User

RIP Routing User

Routing User

Routing and Remote Access User

Scripts (Logon/Logoff) User

Scripts (Logon/Logoff) User

Scripts (Startup/Shutdown) User

Scripts (Startup/Shutdown) User

Security Configuration and Analysis User

Security Settings User

Security Settings User

Security Templates User

Send Console Message User

Server Manager User

Service Dependencies User

Services User

Shared Folders User

Shared Folders Ext User

SMTP Protocol User

SNMP User

Software Installation (Computers) User

Software Installation (Computers) User

Software Installation (Users) User

Software Installation (Users) User

System Information User

System Properties User

Telephony User

TPM Management User

Windows Firewall with Advanced Security User

Windows Firewall with Advanced Security User

Wired Network (IEEE 802.3) Policies User

Wireless Monitor User

Wireless Network (IEEE 802.11) Policies User

WMI Control User

DFS Management User

DFS Management Extension User

Disk Management Extension User

File Server Resource Manager User

File Server Resource Manager Extension User

Group Policy Management Editor User

Group Policy Starter GPO Editor User

Share and Storage Management User

Share and Storage Management Extension User

Storage Manager for SANs User

Storage Manager for SANS Extension User

Turn off Windows Mobility Center Machine

Turn off Windows Mobility Center User

Turn off Windows presentation settings Machine

Turn off Windows presentation settings User

Microsoft Support Diagnostic Tool: Configure execution level Machine

Microsoft Support Diagnostic Tool: Restrict tool download Machine

Microsoft Support Diagnostic Tool: Turn on MSDT interactive communication with Support Provider Machine

Allow admin to install from Remote Desktop Services session Machine

Always install with elevated privileges Machine

Always install with elevated privileges User

Baseline file cache maximum size Machine

Cache transforms in secure location on workstation Machine

Disable IE security prompt for Windows Installer scripts Machine

Disable logging via package settings Machine

Disable Windows Installer Machine

Enable user control over installs Machine

Enable user to browse for source while elevated Machine

Enable user to patch elevated products Machine

Enable user to use media source while elevated Machine

Enforce upgrade component rules Machine

Logging Machine

Prevent removable media source for any install User

Prohibit Flyweight Patching Machine

Prohibit non-administrators from applying vendor signed updates Machine

Prohibit patching Machine

Prohibit removal of updates Machine

Prohibit rollback Machine

Prohibit rollback User

Prohibit Use of Restart Manager Machine

Prohibit User Installs Machine

Remove browse dialog box for new source Machine

Search order User

Turn off creation of System Restore Checkpoints Machine

Configure MSI Corrupted File Recovery Behavior Machine

Allow the Network Access Protection client to support the 802.1x Enforcement Client component Machine

Corporate DNS Probe Host Address Machine

Corporate DNS Probe Host Name Machine

Corporate Site Prefix List Machine

Corporate Website Probe URL Machine

Domain Location Determination URL Machine

Allow cryptography algorithms compatible with Windows NT 4.0 Machine

Automated Site Coverage by the DC Locator DNS SRV Records Machine

Contact PDC on logon failure Machine

DC Locator DNS records not registered by the DCs Machine

Do not process incoming mailslot messages used for domain controller location based on NetBIOS domain names Machine

Domain Controller Address Type Returned Machine

Dynamic Registration of the DC Locator DNS Records Machine

Expected dial-up delay on logon Machine

Final DC Discovery Retry Setting for Background Callers Machine

Force Rediscovery Interval Machine

Initial DC Discovery Retry Setting for Background Callers Machine

Location of the DCs hosting a domain with single label DNS name Machine

Log File Debug Output Level Machine

Maximum DC Discovery Retry Interval Setting for Background Callers Machine

Maximum Log File Size Machine

Negative DC Discovery Cache Setting Machine

Netlogon share compatibility Machine

Positive Periodic DC Cache Refresh for Background Callers Machine

Positive Periodic DC Cache Refresh for Non-Background Callers Machine

Priority Set in the DC Locator DNS SRV Records Machine

Refresh Interval of the DC Locator DNS Records Machine

Scavenge Interval Machine

Site Name Machine

Sites Covered by the Application Directory Partition Locator DNS SRV Records Machine

Sites Covered by the DC Locator DNS SRV Records Machine

Sites Covered by the GC Locator DNS SRV Records Machine

Sysvol share compatibility Machine

Try Next Closest Site Machine

TTL Set in the DC Locator DNS Records Machine

Weight Set in the DC Locator DNS SRV Records Machine

Ability to change properties of an all user remote access connection User

Ability to delete all user remote access connections User

Ability to Enable/Disable a LAN connection User

Ability to rename all user remote access connections User

Ability to rename LAN connections User

Ability to rename LAN connections or remote access connections available to all users User

Do not show the "local access only" network icon Machine

Enable Windows 2000 Network Connections settings for Administrators User

Prohibit access to properties of a LAN connection User

Prohibit access to properties of components of a LAN connection User

Prohibit access to properties of components of a remote access connection User

Prohibit access to the Advanced Settings item on the Advanced menu User

Prohibit access to the New Connection Wizard User

Prohibit access to the Remote Access Preferences item on the Advanced menu User

Prohibit adding and removing components for a LAN or remote access connection User

Prohibit changing properties of a private remote access connection User

Prohibit connecting and disconnecting a remote access connection User

Prohibit deletion of remote access connections User

Prohibit Enabling/Disabling components of a LAN connection User

Prohibit installation and configuration of Network Bridge on your DNS domain network Machine

Prohibit renaming private remote access connections User

Prohibit TCP/IP advanced configuration User

Prohibit use of Internet Connection Firewall on your DNS domain network Machine

Prohibit use of Internet Connection Sharing on your DNS domain network Machine

Prohibit viewing of status for an active connection User

Require domain users to elevate when setting a network's location Machine

Route all traffic through the internal network Machine

Turn off notifications when a connection has only limited or no connectivity User

Network Projector Port Setting Machine

Turn off Connect to a Network Projector Machine

Turn off Connect to a Network Projector User

Action on server disconnect Machine

Action on server disconnect User

Administratively assigned offline files Machine

Administratively assigned offline files User

Allow or Disallow use of the Offline Files feature Machine

At logoff, delete local copy of userΓÇÖs offline files Machine

Configure Background Sync Machine

Configure Slow link speed Machine

Configure slow-link mode Machine

Default cache size Machine

Enable Transparent Caching Machine

Encrypt the Offline Files cache Machine

Event logging level Machine

Event logging level User

Exclude files from being cached Machine

Files not cached Machine

Initial reminder balloon lifetime Machine

Initial reminder balloon lifetime User

Limit disk space used by offline files Machine

Non-default server disconnect actions Machine

Non-default server disconnect actions User

Prevent use of Offline Files folder Machine

Prevent use of Offline Files folder User

Prohibit 'Make Available Offline' for these file and folders Machine

Prohibit 'Make Available Offline' for these file and folders User

Prohibit user configuration of Offline Files Machine

Prohibit user configuration of Offline Files User

Reminder balloon frequency Machine

Reminder balloon frequency User

Reminder balloon lifetime Machine

Reminder balloon lifetime User

Remove 'Make Available Offline' Machine

Remove 'Make Available Offline' User

Subfolders always available offline Machine

Synchronize all offline files before logging off Machine

Synchronize all offline files before logging off User

Synchronize all offline files when logging on Machine

Synchronize all offline files when logging on User

Synchronize offline files before suspend Machine

Synchronize offline files before suspend User

Turn off reminder balloons Machine

Turn off reminder balloons User

Turn on economical application of administratively assigned Offline Files Machine

Disable password strength validation for Peer Grouping Machine

Set PNRP cloud to resolve only Machine



Set the Seed Server Machine



Turn off Microsoft Peer-to-Peer Networking Services Machine

Turn off Multicast Bootstrap Machine



Turn off PNRP cloud creation Machine



Make Parental Controls control panel visible on a Domain Machine

Detect application failures caused by deprecated COM objects Machine

Detect application failures caused by deprecated Windows DLLs Machine

Detect application install failures Machine

Detect application installers that need to be run as administrator Machine

Detect applications unable to launch installers under UAC Machine

Notify blocked drivers Machine

Configure BranchCache for network files Machine

Set BranchCache Distributed Cache mode Machine

Set BranchCache Hosted Cache mode Machine

Set percentage of disk space used for client computer cache Machine

Turn on BranchCache Machine

Turn off Tablet PC Pen Training Machine

Turn off Tablet PC Pen Training User

Turn off access to the OEM and Microsoft branding section machine

Turn off access to the OEM and Microsoft branding section user

Turn off access to the performance center core section machine

Turn off access to the performance center core section user

Turn off access to the solutions to performance problems section machine

Turn off access to the solutions to performance problems section user





Enable/Disable PerfTrack Machine

Allow Applications to Prevent Automatic Sleep (On Battery) Machine

Allow Applications to Prevent Automatic Sleep (Plugged In) Machine

Allow Automatic Sleep with Open Network Files (On Battery) Machine

Allow Automatic Sleep with Open Network Files (Plugged In) Machine

Allow Standby States (S1-S3) When Sleeping (On Battery) Machine

Allow Standby States (S1-S3) When Sleeping (Plugged In) Machine

Critical Battery Notification Action Machine

Critical Battery Notification Level Machine

Do not turn off system power after a Windows system shutdown has occurred. Machine

Low Battery Notification Action Machine

Low Battery Notification Level Machine

Prompt for password on resume from hibernate / suspend User

Reduce Display Brightness (On Battery) Machine

Reduce Display Brightness (Plugged In) Machine

Require a Password When a Computer Wakes (On Battery) Machine

Require a Password When a Computer Wakes (Plugged In) Machine

Reserve Battery Notification Level Machine

Select an Active Power Plan Machine

Select the Lid Switch Action (On Battery) Machine

Select the Lid Switch Action (Plugged In) Machine

Select the Power Button Action (On Battery) Machine

Select the Power Button Action (Plugged In) Machine

Select the Sleep Button Action (On Battery) Machine

Select the Sleep Button Action (Plugged In) Machine

Select the Start Menu Power Button Action (On Battery) Machine

Select the Start Menu Power Button Action (Plugged In) Machine

Specify a Custom Active Power Plan Machine

Specify the Display Dim Brightness (On Battery) Machine

Specify the Display Dim Brightness (Plugged In) Machine

Specify the System Hibernate Timeout (On Battery) Machine

Specify the System Hibernate Timeout (Plugged In) Machine

Specify the System Sleep Timeout (On Battery) Machine

Specify the System Sleep Timeout (Plugged In) Machine

Specify the Unattended Sleep Timeout (On Battery) Machine

Specify the Unattended Sleep Timeout (Plugged In) Machine

Turn Off Adaptive Display Timeout (On Battery) Machine

Turn Off Adaptive Display Timeout (Plugged In) Machine

Turn Off Hybrid Sleep (On Battery) Machine

Turn Off Hybrid Sleep (Plugged In) Machine

Turn Off Low Battery User Notification Machine

Turn Off the Display (On Battery) Machine

Turn Off the Display (Plugged In) Machine

Turn Off the Hard Disk (On Battery) Machine

Turn Off the Hard Disk (Plugged In) Machine

Turn On Desktop Background Slideshow (On Battery) Machine

Turn On Desktop Background Slideshow (Plugged In) Machine

Turn on the Ability for Applications to Prevent Sleep Transitions (On Battery) Machine

Turn on the Ability for Applications to Prevent Sleep Transitions (Plugged In) Machine

Hide previous versions list for local files Machine

Hide previous versions list for local files User

Hide previous versions list for remote files Machine

Hide previous versions list for remote files User

Hide previous versions of files on backup location Machine

Hide previous versions of files on backup location User

Prevent restoring local previous versions Machine

Prevent restoring local previous versions User

Prevent restoring previous versions from backups Machine

Prevent restoring previous versions from backups User

Prevent restoring remote previous versions Machine

Prevent restoring remote previous versions User

Add Printer wizard - Network scan page (Managed network) Machine

Add Printer wizard - Network scan page (Unmanaged network) Machine

Allow Print Spooler to accept client connections Machine

Allow printers to be published Machine

Allow pruning of published printers Machine

Always render print jobs on the server Machine

Automatically publish new printers in Active Directory Machine

Browse a common web site to find printers User

Browse the network to find printers User

Check published state Machine

Computer location Machine

Custom support URL in the Printers folder's left pane Machine

Default Active Directory path when searching for printers User

Directory pruning interval Machine

Directory pruning priority Machine

Directory pruning retry Machine

Disallow installation of printers using kernel-mode drivers Machine

Execute print drivers in isolated processes Machine

Extend Point and Print connection to search Windows Update Machine

Log directory pruning retry events Machine

Only use Package Point and print Machine

Only use Package Point and print User

Override print driver execution compatibility setting reported by print driver Machine

Package Point and print - Approved servers Machine

Package Point and print - Approved servers User

Point and Print Restrictions Machine

Point and Print Restrictions User

Pre-populate printer search location text Machine

Prevent addition of printers User

Prevent deletion of printers User

Printer browsing Machine

Prune printers that are not automatically republished Machine

Web-based printing Machine

Hide "Get Programs" page User

Hide "Installed Updates" page User

Hide "Programs and Features" page User

Hide "Set Program Access and Computer Defaults" page User

Hide "Windows Features" User

Hide "Windows Marketplace" User

Hide the Programs Control Panel User

Set the interval between synchronization retries for Password Synchronization Machine

Set the number of synchronization retries for servers running Password Synchronization Machine

Turn on extensive logging for Password Synchronization Machine

Turn on the Windows to NIS password synchronization for users that have been migrated to Active Directory Machine

Best effort service type Machine



Controlled load service type Machine



Guaranteed service type Machine



Limit outstanding packets Machine

Limit reservable bandwidth Machine

Network control service type Machine



Non-conforming packets Machine

Qualitative service type Machine



Set timer resolution Machine

Configure Reliability WMI Providers Machine


Allow restore of system to default state Machine

Activate Shutdown Event Tracker System State Data feature Machine

Display Shutdown Event Tracker Machine

Enable Persistent Time Stamp Machine

Report unplanned shutdown events Machine

Allow only Vista or later connections Machine

Customize Warning Messages Machine

Offer Remote Assistance Machine

Solicited Remote Assistance Machine

Turn on bandwidth optimization Machine

Turn on session logging Machine

All Removable Storage classes: Deny all access Machine

All Removable Storage classes: Deny all access User

All Removable Storage: Allow direct access in remote sessions Machine

CD and DVD: Deny execute access Machine

CD and DVD: Deny read access Machine

CD and DVD: Deny read access User

CD and DVD: Deny write access Machine

CD and DVD: Deny write access User

Custom Classes: Deny read access Machine

Custom Classes: Deny read access User

Custom Classes: Deny write access Machine

Custom Classes: Deny write access User

Floppy Drives: Deny execute access Machine

Floppy Drives: Deny read access Machine

Floppy Drives: Deny read access User

Floppy Drives: Deny write access Machine

Floppy Drives: Deny write access User

Removable Disks: Deny execute access Machine

Removable Disks: Deny read access Machine

Removable Disks: Deny read access User

Removable Disks: Deny write access Machine

Removable Disks: Deny write access User

Tape Drives: Deny execute access Machine

Tape Drives: Deny read access Machine

Tape Drives: Deny read access User

Tape Drives: Deny write access Machine

Tape Drives: Deny write access User

Time (in seconds) to force reboot Machine

Time (in seconds) to force reboot User

WPD Devices: Deny read access Machine

WPD Devices: Deny read access User

WPD Devices: Deny write access Machine

WPD Devices: Deny write access User

Ignore Delegation Failure Machine

Minimum Idle Connection Timeout for RPC/HTTP connections Machine

Propagation of extended error information Machine

Restrictions for Unauthenticated RPC clients Machine

RPC Endpoint Mapper Client Authentication Machine

RPC Troubleshooting State Information Machine

Allow logon scripts when NetBIOS or WINS is disabled Machine

Maximum wait time for Group Policy scripts Machine

Run legacy logon scripts hidden User

Run logoff scripts visible User

Run logon scripts synchronously Machine

Run logon scripts synchronously User

Run logon scripts visible User

Run shutdown scripts visible Machine

Run startup scripts asynchronously Machine

Run startup scripts visible Machine

Run Windows PowerShell scripts first at computer startup, shutdown Machine

Run Windows PowerShell scripts first at user logon, logoff machine

Run Windows PowerShell scripts first at user logon, logoff user

Configure Security Policy for Scripted Diagnostics Machine

Troubleshooting: Allow users to access and run Troubleshooting Wizards Machine

Troubleshooting: Allow users to access online troubleshooting content on Microsoft servers from the Troubleshootin Machine

Configure Scheduled Maintenance Behavior Machine

Force TIFF IFilter to perform OCR for every page in a TIFF document Machine

Select OCR languages from a code page Machine

Turn on Security Center (Domain PCs only) Machine

Turn off location Machine

Turn off location User

Turn off location scripting Machine

Turn off location scripting User

Turn off sensors Machine

Turn off sensors User

Configure the refresh interval for Server Manager Machine

Do not display Initial Configuration Tasks window automatically at logon Machine

Do not display Manage Your Server page at logon Machine

Do not display Server Manager automatically at logon Machine

Specify Windows installation file location Machine

Specify Windows Service Pack installation file location Machine

Turn off handwriting personalization data sharing machine

Turn off handwriting personalization data sharing user

Allow DFS roots to be published User

Allow shared folders to be published User

Prevent the computer from joining a homegroup Machine

Prevent users from sharing files within their profile. User

Don't run specified Windows applications User

Prevent access to registry editing tools User

Prevent access to the command prompt User

Run only specified Windows applications User

Do not display the Welcome Center at user logon User

Override the More Gadgets link Machine

Override the More Gadgets link User

Restrict unpacking and installation of gadgets that are not digitally signed. Machine

Restrict unpacking and installation of gadgets that are not digitally signed. User

Turn off desktop gadgets Machine

Turn off desktop gadgets User

Turn Off user-installed desktop gadgets Machine

Turn Off user-installed desktop gadgets User

Delete data from devices running Microsoft firmware when a user logs off from the computer. Machine

Delete data from devices running Microsoft firmware when a user logs off from the computer. User

Require a PIN to access data on devices running Microsoft firmware Machine

Require a PIN to access data on devices running Microsoft firmware User

Turn off automatic wake Machine

Turn off automatic wake User

Turn off Windows SideShow Machine

Turn off Windows SideShow User

Allow certificates with no extended key usage certificate attribute Machine

Allow ECC certificates to be used for logon and authentication Machine

Allow Integrated Unblock screen to be displayed at the time of logon Machine

Allow signature keys valid for Logon Machine

Allow time invalid certificates Machine

Allow user name hint Machine

Configure root certificate clean up Machine

Display string when smart card is blocked Machine

Filter duplicate logon certificates Machine

Force the reading of all certificates from the smart card Machine

Notify user of successful smart card driver installation Machine

Prevent plaintext PINs from being returned by Credential Manager Machine

Reverse the subject name stored in a certificate when displaying Machine

Turn on certificate propagation from smart card Machine

Turn on root certificate propagation from smart card Machine

Turn on Smart Card Plug and Play service Machine

Set the map update interval for NIS subordinate servers Machine

Turn on extensive logging for Active Directory Domain Services domain controllers that are running Server for NIS Machine

Communities Machine

Permitted Managers Machine

Traps for public community Machine

Do not allow Sound Recorder to run Machine

Do not allow Sound Recorder to run User

Add "Run in Separate Memory Space" check box to Run dialog box User

Add Logoff to the Start Menu User

Add Search Internet link to Start Menu User

Add the Run command to the Start Menu User

Change Start Menu power button User

Clear history of recently opened documents on exit User

Clear the recent programs list for new users User

Do not display any custom toolbars in the taskbar User

Do not keep history of recently opened documents User

Do not search communications User

Do not search for files User

Do not search Internet User

Do not search programs and Control Panel items User

Do not use the search-based method when resolving shell shortcuts User

Do not use the tracking-based method when resolving shell shortcuts User

Force classic Start Menu User

Gray unavailable Windows Installer programs Start Menu shortcuts User

Hide the notification area User

Lock the Taskbar User

Prevent changes to Taskbar and Start Menu Settings User

Prevent grouping of taskbar items User

Remove access to the context menus for the taskbar User

Remove All Programs list from the Start menu User

Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands User

Remove Balloon Tips on Start Menu items User

Remove Clock from the system notification area User

Remove common program groups from Start Menu User

Remove Default Programs link from the Start menu. User

Remove Documents icon from Start Menu User

Remove Downloads link from Start Menu User

Remove drag-and-drop and context menus on the Start Menu User

Remove Favorites menu from Start Menu User

Remove frequent programs list from the Start Menu User

Remove Games link from Start Menu User

Remove Help menu from Start Menu User

Remove Homegroup link from Start Menu User

Remove links and access to Windows Update User

Remove Logoff on the Start Menu User

Remove Music icon from Start Menu User

Remove Network Connections from Start Menu User

Remove Network icon from Start Menu User

Remove Pictures icon from Start Menu User

Remove pinned programs list from the Start Menu User

Remove programs on Settings menu User

Remove Recent Items menu from Start Menu User

Remove Recorded TV link from Start Menu User

Remove Run menu from Start Menu User

Remove Search Computer link User

Remove Search link from Start Menu User

Remove See More Results / Search Everywhere link User

Remove the "Undock PC" button from the Start Menu User

Remove user folder link from Start Menu User

Remove user name from Start Menu User

Remove user's folders from the Start Menu User

Remove Videos link from Start Menu User

Show QuickLaunch on Taskbar User

Turn off notification area cleanup User

Turn off personalized menus User

Turn off user tracking User

Set the Email IDs to which notifications are to be sent Machine

Set the SMTP Server used to send notifications Machine

Set the Time interval in minutes for logging accounting data Machine

Turn on Accounting for WSRM Machine

Turn off Configuration Machine

Turn off System Restore Machine

Disable text prediction Machine

Disable text prediction User

For tablet pen input, donΓÇÖt show the Input Panel icon Machine

For tablet pen input, donΓÇÖt show the Input Panel icon User

For touch input, donΓÇÖt show the Input Panel icon Machine

For touch input, donΓÇÖt show the Input Panel icon User

Include rarely used Chinese, Kanji, or Hanja characters Machine

Include rarely used Chinese, Kanji, or Hanja characters User

Prevent Input Panel tab from appearing Machine

Prevent Input Panel tab from appearing User

Switch to the Simplified Chinese (PRC) gestures Machine

Switch to the Simplified Chinese (PRC) gestures User

Turn off AutoComplete integration with Input Panel Machine

Turn off AutoComplete integration with Input Panel User

Turn off password security in Input Panel Machine

Turn off password security in Input Panel User

Turn off tolerant and Z-shaped scratch-out gestures Machine

Turn off tolerant and Z-shaped scratch-out gestures User

Do not allow Inkball to run Machine

Do not allow Inkball to run User

Do not allow printing to Journal Note Writer Machine

Do not allow printing to Journal Note Writer User

Do not allow Snipping Tool to run Machine

Do not allow Snipping Tool to run User

Do not allow Windows Journal to be run Machine

Do not allow Windows Journal to be run User

Prevent Back-ESC mapping Machine

Prevent Back-ESC mapping User

Prevent flicks Machine

Prevent flicks User

Prevent Flicks Learning Mode Machine

Prevent Flicks Learning Mode User

Prevent launch an application Machine

Prevent launch an application User

Prevent press and hold Machine

Prevent press and hold User

Turn off hardware buttons Machine

Turn off hardware buttons User

Turn off pen feedback Machine

Turn off pen feedback User

Do not allow pinning items in Jump Lists User

Do not allow pinning programs to the Taskbar User

Do not display or track items in Jump Lists from remote locations User

Lock all taskbar settings User

Prevent users from adding or removing toolbars User

Prevent users from moving taskbar to another screen dock location User

Prevent users from rearranging toolbars User

Prevent users from resizing the taskbar User

Remove pinned programs from the Taskbar User

Remove the Action Center icon User

Remove the battery meter User

Remove the networking icon User

Remove the volume control icon User

Turn off all balloon notifications User

Turn off automatic promotion of notification icons to the taskbar User

Turn off feature advertisement balloon notifications User

Turn off taskbar thumbnails User

Hide Advanced Properties Checkbox in Add Scheduled Task Wizard Machine

Hide Advanced Properties Checkbox in Add Scheduled Task Wizard User

Hide Property Pages Machine

Hide Property Pages User

Prevent Task Run or End Machine

Prevent Task Run or End User

Prohibit Browse Machine

Prohibit Browse User

Prohibit Drag-and-Drop Machine

Prohibit Drag-and-Drop User

Prohibit New Task Creation Machine

Prohibit New Task Creation User

Prohibit Task Deletion Machine

Prohibit Task Deletion User

6to4 Relay Name Machine

6to4 Relay Name Resolution Interval Machine

6to4 State Machine

IP-HTTPS State Machine

ISATAP Router Name Machine

ISATAP State Machine

Teredo Client Port Machine

Teredo Default Qualified Machine

Teredo Refresh Rate Machine

Teredo Server Name Machine

Teredo State Machine

Windows Scaling Heuristics State Machine

Allow .rdp files from unknown publishers Machine

Allow .rdp files from unknown publishers User

Allow .rdp files from valid publishers and user's default .rdp settings Machine

Allow .rdp files from valid publishers and user's default .rdp settings User

Allow audio and video playback redirection Machine

Allow audio recording redirection Machine

Allow time zone redirection Machine

Allow users to connect remotely using Remote Desktop Services Machine

Always prompt for password upon connection Machine

Always show desktop on connection Machine

Automatic reconnection Machine

Configure keep-alive connection interval Machine

Configure RD Connection Broker farm name Machine

Configure RD Connection Broker server name Machine

Configure server authentication for client Machine

Deny logoff of an administrator logged in to the console session Machine

Do not allow client printer redirection Machine

Do not allow clipboard redirection Machine

Do not allow COM port redirection Machine

Do not allow drive redirection Machine

Do not allow local administrators to customize permissions Machine

Do not allow LPT port redirection Machine

Do not allow passwords to be saved Machine

Do not allow passwords to be saved User

Do not allow smart card device redirection Machine

Do not allow supported Plug and Play device redirection Machine

Do not delete temp folder upon exit Machine

Do not set default client printer to be default printer in a session Machine

Do not use temporary folders per session Machine

Enable connection through RD Gateway User

Enforce Removal of Remote Desktop Wallpaper Machine

Hide notifications about RD Licensing problems that affect the RD Session Host server Machine

Join RD Connection Broker Machine

License server security group Machine

Limit audio playback quality Machine

Limit maximum color depth Machine

Limit maximum display resolution Machine

Limit maximum number of monitors Machine

Limit number of connections Machine

Limit the size of the entire roaming user profile cache Machine

Optimize visual experience for Remote Desktop Services sessions Machine

Prevent license upgrade Machine

Prompt for credentials on the client computer Machine

Remove "Disconnect" option from Shut Down dialog Machine

Remove Windows Security item from Start menu Machine

Require secure RPC communication Machine

Require use of specific security layer for remote (RDP) connections Machine

Require user authentication for remote connections by using Network Level Authentication Machine

Restrict Remote Desktop Services users to a single Remote Desktop Services session Machine

Server Authentication Certificate Template Machine

Set client connection encryption level Machine

Set compression algorithm for RDP data Machine

Set path for Remote Desktop Services Roaming User Profile Machine

Set RD Gateway authentication method User

Set RD Gateway server address User

Set Remote Desktop Services User Home Directory Machine

Set rules for remote control of Remote Desktop Services user sessions Machine

Set rules for remote control of Remote Desktop Services user sessions User

Set the Remote Desktop licensing mode Machine

Set time limit for active but idle Remote Desktop Services sessions Machine

Set time limit for active but idle Remote Desktop Services sessions User

Set time limit for active Remote Desktop Services sessions Machine

Set time limit for active Remote Desktop Services sessions User

Set time limit for disconnected sessions Machine

Set time limit for disconnected sessions User

Specify RD Session Host server fallback printer driver behavior Machine

Specify SHA1 thumbprints of certificates representing trusted .rdp publishers Machine

Specify SHA1 thumbprints of certificates representing trusted .rdp publishers User

Start a program on connection Machine

Start a program on connection User

Terminate session when time limits are reached Machine

Terminate session when time limits are reached User

Use IP Address Redirection Machine

Use mandatory profiles on the RD Session Host server Machine

Use Remote Desktop Easy Print printer driver first Machine

Use Remote Desktop Easy Print printer driver first User

Use the specified Remote Desktop license servers Machine

Allow desktop composition for remote desktop sessions Machine

Allow remote start of unlisted programs Machine

Allow time zone redirection User

Always show desktop on connection User

Do not allow clipboard redirection User

Do not allow font smoothing Machine

Do not use Remote Desktop Session Host server IP address when virtual IP address is not available Machine

Redirect only the default client printer Machine

Redirect only the default client printer User

Remove remote desktop wallpaper User

Select the network adapter to be used for Remote Desktop IP Virtualization Machine

Set time limit for logoff of RemoteApp sessions Machine

Set time limit for logoff of RemoteApp sessions User

Turn off Fair Share CPU Scheduling Machine

Turn off Windows Installer RDS Compatibility Machine

Turn on Remote Desktop IP Virtualization Machine

Use RD Connection Broker load balancing Machine

Turn off the caching of thumbnails in hidden thumbs.db files User

Turn off the display of thumbnails and only display icons on network folders User

Turn off the display of thumbnails and only display icons. User

Turn off Tablet PC touch input Machine

Turn off Tablet PC touch input User

Turn off Touch Panning Machine

Turn off Touch Panning User

Configure the list of blocked TPM commands Machine

Ignore the default list of blocked TPM commands Machine

Ignore the local list of blocked TPM commands Machine

Turn on TPM backup to Active Directory Domain Services Machine

Prevent backing up to local disks Machine

Prevent backing up to local disks User

Prevent backing up to network location Machine

Prevent backing up to network location User

Prevent backing up to optical media (CD/DVD) Machine

Prevent backing up to optical media (CD/DVD) User

Prevent the user from running the Backup Status and Configuration program Machine

Prevent the user from running the Backup Status and Configuration program User

Turn off restore functionality Machine

Turn off restore functionality User

Turn off the ability to back up data files Machine

Turn off the ability to back up data files User

Turn off the ability to create a system image Machine

Turn off the ability to create a system image User

Add the Administrators security group to roaming user profiles Machine

Background upload of a roaming user profile's registry file while user is logged on Machine

Connect home directory to root of the share User

Delete cached copies of roaming profiles Machine

Delete user profiles older than a specified number of days on system restart Machine

Do not check for user ownership of Roaming Profile Folders Machine

Do not detect slow network connections Machine

Do not forcefully unload the users registry at user logoff Machine

Do not log users on with temporary profiles Machine

Exclude directories in roaming profile User

Leave Windows Installer and Group Policy Software Installation Data Machine

Limit profile size User

Maximum retries to unload and update user profile Machine

Network directories to sync at Logon/Logoff time only User

Only allow local user profiles Machine

Prevent Roaming Profile changes from propagating to the server Machine

Prompt user when a slow network connection is detected Machine

Set maximum wait time for the network if a user has a roaming user profile or remote home directory Machine

Set roaming profile path for all users logging onto this computer Machine

Slow network connection timeout for user profiles Machine

Timeout for dialog boxes Machine

Wait for remote user profile Machine

Allow access to BitLocker-protected fixed data drives from earlier versions of Windows Machine

Allow access to BitLocker-protected removable data drives from earlier versions of Windows Machine

Allow enhanced PINs for startup Machine

Choose default folder for recovery password Machine

Choose drive encryption method and cipher strength Machine

Choose how BitLocker-protected fixed drives can be recovered Machine

Choose how BitLocker-protected operating system drives can be recovered Machine

Choose how BitLocker-protected removable drives can be recovered Machine

Choose how users can recover BitLocker-protected drives (Windows Server 2008 and Windows Vista) Machine

Configure minimum PIN length for startup Machine

Configure TPM platform validation profile Machine

Configure use of passwords for fixed data drives Machine

Configure use of passwords for removable data drives Machine

Configure use of smart cards on fixed data drives Machine

Configure use of smart cards on removable data drives Machine

Control use of BitLocker on removable drives Machine

Deny write access to fixed drives not protected by BitLocker Machine

Deny write access to removable drives not protected by BitLocker Machine

Prevent memory overwrite on restart Machine

Provide the unique identifiers for your organization Machine

Require additional authentication at startup Machine

Require additional authentication at startup (Windows Server 2008 and Windows Vista) Machine

Store BitLocker recovery information in Active Directory Domain Services(Windows Server 2008 and Windows Vista) Machine

Validate smart card certificate usage rule compliance Machine

Configure Windows NTP Client Machine

Enable Windows NTP Client Machine

Enable Windows NTP Server Machine

Global Configuration Settings Machine

Diagnostics: Configure scenario execution level Machine

Diagnostics: Configure scenario retention Machine

Turn off Windows Calendar Machine

Turn off Windows Calendar User

Prevent Windows Anytime Upgrade from running. machine

Prevent Windows Anytime Upgrade from running. user

Allow only system backup Machine

Disallow locally attached storage as backup target Machine

Disallow network as backup target Machine

Disallow optical media as backup target Machine

Disallow run-once backups Machine

Prohibit installing or uninstalling color profiles Machine

Prohibit installing or uninstalling color profiles User

Configuration of wireless settings using Windows Connect Now Machine

Prohibit Access of the Windows Connect Now wizards Machine

Prohibit Access of the Windows Connect Now wizards User

Check for New Signatures Before Scheduled Scans Machine

Configure Microsoft SpyNet Reporting Machine

Turn off Real-Time Monitoring Machine

Turn off Routinely Taking Action Machine

Turn off Windows Defender Machine

Turn on definition updates through both WSUS and the Microsoft Malware Protection Center Machine

Turn on definition updates through both WSUS and Windows Update Machine

Allow only per user or approved shell extensions User

Allow OpenSearch queries in Windows Explorer machine










Allow OpenSearch queries in Windows Explorer user










Allow previewing and custom thumbnails of OpenSearch query results in Windows Explorer machine










Allow previewing and custom thumbnails of OpenSearch query results in Windows Explorer user










Disable binding directly to IPropertySetStorage without intermediate layers. machine

Disable binding directly to IPropertySetStorage without intermediate layers. user

Disable Known Folders User

Display confirmation dialog when deleting files User

Do not move deleted files to the Recycle Bin User

Do not request alternate credentials User

Do not track Shell shortcuts during roaming User

Hide the common dialog back button User

Hide the common dialog places bar User

Hide the dropdown list of recent files User

Hide these specified drives in My Computer User

Hides the Manage item on the Windows Explorer context menu User

Items displayed in Places Bar User

Maximum allowed Recycle Bin size User

Maximum number of recent documents User

No Computers Near Me in Network Locations User

No Entire Network in Network Locations User

Pin Internet search sites to the "Search again" links and the Start menu User

Pin Libraries or Search Connectors to the "Search again" links and the Start menu User

Prevent access to drives from My Computer User

Remove "Map Network Drive" and "Disconnect Network Drive" User

Remove CD Burning features User

Remove DFS tab User

Remove File menu from Windows Explorer User

Remove Hardware tab User

Remove Search button from Windows Explorer User

Remove Security tab User

Remove Shared Documents from My Computer User

Remove the Search the Internet "Search again" link User

Remove UI to change keyboard navigation indicator setting User

Remove UI to change menu animation setting User

Remove Windows Explorer's default context menu User

Removes the Folder Options menu item from the Tools menu User

Request credentials for network installations User

Turn off caching of thumbnail pictures User

Turn off display of recent search entries in the Windows Explorer search box User

Turn off numerical sorting in Windows Explorer machine

Turn off numerical sorting in Windows Explorer user

Turn off shell protocol protected mode Machine

Turn off shell protocol protected mode User

Turn off the display of snippets in Content view mode User

Turn off Windows Libraries features that rely on indexed file data User

Turn off Windows+X hotkeys User

Turn on Classic Shell User

Verify old and new Folder Redirection targets point to the same share before redirecting Machine

Hide the file scan progress window Machine

Limit Windows File Protection cache size Machine

Set Windows File Protection scanning Machine

Specify Windows File Protection cache location Machine

Windows Firewall: Allow authenticated IPsec bypass Machine

Windows Firewall: Allow ICMP exceptions Machine

Windows Firewall: Allow ICMP exceptions Machine

Windows Firewall: Allow inbound file and printer sharing exception Machine

Windows Firewall: Allow inbound file and printer sharing exception Machine

Windows Firewall: Allow inbound remote administration exception Machine

Windows Firewall: Allow inbound remote administration exception Machine

Windows Firewall: Allow inbound Remote Desktop exceptions Machine

Windows Firewall: Allow inbound Remote Desktop exceptions Machine

Windows Firewall: Allow inbound UPnP framework exceptions Machine

Windows Firewall: Allow inbound UPnP framework exceptions Machine

Windows Firewall: Allow local port exceptions Machine

Windows Firewall: Allow local port exceptions Machine

Windows Firewall: Allow local program exceptions Machine

Windows Firewall: Allow local program exceptions Machine

Windows Firewall: Allow logging Machine

Windows Firewall: Allow logging Machine

Windows Firewall: Define inbound port exceptions Machine

Windows Firewall: Define inbound port exceptions Machine

Windows Firewall: Define inbound program exceptions Machine

Windows Firewall: Define inbound program exceptions Machine

Windows Firewall: Do not allow exceptions Machine

Windows Firewall: Do not allow exceptions Machine

Windows Firewall: Prohibit notifications Machine

Windows Firewall: Prohibit notifications Machine

Windows Firewall: Prohibit unicast response to multicast or broadcast requests Machine

Windows Firewall: Prohibit unicast response to multicast or broadcast requests Machine

Windows Firewall: Protect all network connections Machine

Windows Firewall: Protect all network connections Machine

Turn off the communities features Machine

Turn off the communities features User

Turn off Windows Mail application Machine

Turn off Windows Mail application User

Prevent Windows Media DRM Internet Access Machine

Allow Screen Saver User

Configure HTTP Proxy User

Configure MMS Proxy User

Configure Network Buffering User

Configure RTSP Proxy User

Do Not Show Anchor User

Do Not Show First Use Dialog Boxes Machine

Hide Network Tab User

Hide Privacy Tab User

Hide Security Tab User

Prevent Automatic Updates Machine

Prevent CD and DVD Media Information Retrieval User

Prevent Codec Download User

Prevent Desktop Shortcut Creation Machine

Prevent Media Sharing Machine

Prevent Music File Media Information Retrieval User

Prevent Quick Launch Toolbar Shortcut Creation Machine

Prevent Radio Station Preset Retrieval User

Prevent Video Smoothing Machine

Set and Lock Skin User

Streaming Media Protocols User

Do not allow Windows Messenger to be run Machine

Do not allow Windows Messenger to be run User

Do not automatically start Windows Messenger initially Machine

Do not automatically start Windows Messenger initially User

Allow automatic configuration of listeners Machine

Allow Basic authentication Machine

Allow Basic authentication Machine

Allow CredSSP authentication Machine

Allow CredSSP authentication Machine

Allow unencrypted traffic Machine

Allow unencrypted traffic Machine

Disallow Digest authentication Machine

Disallow Kerberos authentication Machine

Disallow Kerberos authentication Machine

Disallow Negotiate authentication Machine

Disallow Negotiate authentication Machine

Specify channel binding token hardening level Machine

Trusted Hosts Machine

Turn On Compatibility HTTP Listener Machine

Turn On Compatibility HTTPS Listener Machine

Allow Remote Shell Access Machine

MaxConcurrentUsers Machine

Specify idle Timeout Machine

Specify maximum amount of memory in MB per Shell Machine

Specify maximum number of processes per Shell Machine

Specify maximum number of remote shells per user Machine

Specify Shell Timeout Machine

Allow Automatic Updates immediate installation Machine

Allow non-administrators to receive update notifications Machine

Allow signed updates from an intranet Microsoft update service location Machine

Automatic Updates detection frequency Machine

Configure Automatic Updates Machine

Delay Restart for scheduled installations Machine

Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box Machine

Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box User

Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box machine

Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box user

Enable client-side targeting Machine

Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates Machine

No auto-restart with logged on users for scheduled automatic updates installations Machine

Remove access to use all Windows Update features User

Re-prompt for restart with scheduled installations Machine

Reschedule Automatic Updates scheduled installations Machine

Specify intranet Microsoft update service location Machine

Turn on recommended updates via Automatic Updates Machine

Turn on Software Notifications Machine

Windows Automatic Updates User

Timeout for hung logon sessions during shutdown Machine

Turn off legacy remote shutdown interface Machine

Custom User Interface User

Disable or enable software Secure Attention Sequence Machine

Display information about previous logons during user logon Machine

Remove logon hours expiration warnings User

Report when logon server was not available during user logon machine

Report when logon server was not available during user logon user

Set action to take when logon hours expire User

Turn off automatic termination of applications that block or cancel shutdown Machine

Custom Instant Search Internet search provider User

Policy Path

Windows Components\ActiveX Installer Service

Windows Components\ActiveX Installer Service

Control Panel\Add or Remove Programs











ADFS

Windows Components\Application Compatibility










Windows Components\Attachment Manager








Windows Components\AutoPlay Policies








Windows Components\Biometrics




Network\Background Intelligent Transfer Service (BITS)
















Windows Components\Windows Customer Experience Improvement Program

Windows Components\Windows Customer Experience Improvement Program

Network\SSL Configuration Settings

System

System

Windows Components\NetMeeting

Windows Components\NetMeeting\Application Sharing

Windows Components\NetMeeting\Audio & Video






Windows Components\NetMeeting\Options Page


























Control Panel

Control Panel

Control Panel

Control Panel

Control Panel\Display

Control Panel\Personalization



Control Panel\Display














Control Panel\User Accounts

Logon

Logon

System\Credentials Delegation









Windows Components\Credential User Interface

Windows Components\Credential User Interface

System\Ctrl+Alt+Del Options




System\Distributed COM\Application Compatibility Settings

System\Distributed COM\Application Compatibility Settings

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop

Desktop

Desktop\Desktop

Desktop\Active Directory


Desktop

Desktop

Desktop


Desktop

Desktop\Desktop

Desktop

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop\Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

Desktop

System\Device Installation\Device Installation Restrictions



System\Driver Installation

System\Device Installation




















System\Device Redirection\Device Redirection Restrictions

System\Device Redirection\Device Redirection Restrictions

Network

Windows Components\Digital Locker

Windows Components\Digital Locker

Troubleshooting and Diagnostics\Disk Diagnostic

Troubleshooting and Diagnostics\Disk Diagnostic

System\Disk NV Cache




System\Disk Quotas

System\Disk Quotas

System\Disk Quotas

System\Disk Quotas

System\Disk Quotas

System\Disk Quotas

System

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Network\DNS Client

Windows Components\Desktop Window Manager\Window Frame Coloring


Windows Components\Desktop Window Manager








System

System\Enhanced Storage Access







Windows Components\Windows Error Reporting\Advanced Error Reporting Settings

Windows Components\Windows Error Reporting\Consent


Windows Components\Windows Error Reporting























Windows Components\Event Forwarding

Windows Components\Event Forwarding

Windows Components\Event Log Service\Application

Windows Components\Event Log Service\Security

Windows Components\Event Log Service\Setup

Windows Components\Event Log Service\System


















Windows Components\Event Viewer



Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Troubleshooting and Diagnostics\Corrupted File Recovery

System\Filesystem

System\Filesystem\NTFS



System\Filesystem


System\Folder Redirection



Windows Explorer\Explorer Frame Pane

Windows Explorer\Explorer Frame Pane

Troubleshooting and Diagnostics\Fault Tolerant Heap

Windows Components\Game Explorer



System

System\Locale Services






Control Panel\Regional and Language Options











System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

System\Group Policy

GroupPolicy:PolicyPolicies

\Logging and tracing

































\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences

\MMC_Preferences









Group Policy

System

System

System

System

Windows Components\Online Assistance

Internet Communication settings



System\Windows HotStart

System\Windows HotStart

Internet Communication Management

Internet Communication Management



























Windows Components\Internet Information Services

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intern

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Locke

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Intran


Windows Components\Internet Explorer\Internet Control Panel\Security Page\Local

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Lock

Windows Components\Internet Explorer\Internet Control Panel\Security Page\Restri


Windows Components\Internet Explorer\Internet Control Panel\Security Page\Truste












Windows Components\Internet Explorer


Windows Components\Internet Explorer\Security Features\Add-on Management


Windows Components\Internet Explorer\Security Features\Binary Behavior Security




Windows Components\Internet Explorer\Security Features\Consistent Mime Handlin

Windows Components\Internet Explorer\Security Features\Information Bar

Windows Components\Internet Explorer\Security Features\Local Machine Zone Loc

Windows Components\Internet Explorer\Security Features\Mime Sniffing Safety Fea

Windows Components\Internet Explorer\Security Features\MK Protocol Security Rest

Windows Components\Internet Explorer\Security Features\Network Protocol Lockd

Windows Components\Internet Explorer\Security Features\Object Caching Protectio

Windows Components\Internet Explorer\Security Features\Protection From Zone Ele

Windows Components\Internet Explorer\Security Features\Restrict ActiveX Install

Windows Components\Internet Explorer\Security Features\Restrict File Download

Windows Components\Internet Explorer\Security Features\Scripted Window Security

Windows Components\Internet Explorer\Application Compatibility\Enable cut, copy















Windows Components\Internet Explorer\Internet Control Panel\Advanced Page


















Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\M

Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Pr































































Windows Components\Internet Explorer\Administrator Approved Controls

Windows Components\Internet Explorer\Toolbars

















































Windows Components\Internet Explorer\Delete Browsing History













Windows Components\Internet Explorer\Accelerators



























Windows Components\Internet Explorer\Offline Pages




























Windows Components\Internet Explorer\Browser menus



















Windows Components\Internet Explorer\Internet Control Panel















Windows Components\Internet Explorer\InPrivate

































Windows Components\Internet Explorer\Security Features\AJAX









Windows Components\Internet Explorer\Persistence Behavior



































Windows Components\Internet Explorer\Compatibility View


















































Windows Components\Internet Explorer\Security Features\Network Protocol Lockdow


Windows Components\Internet Explorer\Internet Control Panel\Security Page




































Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\S























Windows Components\Internet Explorer\Corporate Settings\Code Download

Windows Components\Internet Explorer\Internet Settings\Component Updates\Help M



Windows Components\Internet Explorer\Internet Settings\Display settings\General C

Windows Components\Internet Explorer\Internet Settings\Display settings



Windows Components\Internet Explorer\Internet Settings\Display settings\Link Color





















































































Windows Components\RSS Feeds







Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic













Windows Components\Internet Explorer\Internet Settings\Component Updates\Periodic

Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\B





Windows Components\Internet Explorer\Security Features




































Windows Components\Internet Explorer\Internet Settings\AutoComplete


























Windows Components\Internet Explorer\Internet Settings\URL Encoding
























Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\Si





























































Windows Components\Internet Explorer\Internet Control Panel\Advanced settings\In
















































































Tablet PC\Handwriting personalization

Tablet PC\Handwriting personalization

System\iSCSI\iSCSI Target Discovery

System\iSCSI\General iSCSI

System\iSCSI\iSCSI Security

System\iSCSI\General iSCSI







System\KDC

System\KDC

System\Kerberos

System\Kerberos

System\Kerberos

System\Kerberos

System\Kerberos

Network\Lanman Server

Troubleshooting and Diagnostics\Windows Memory Leak Diagnosis

Network\Link-Layer Topology Discovery

Network\Link-Layer Topology Discovery

System\Logon

System\Logon

System\Logon

System\Logon

System\Logon

System\Logon

System\Logon

System\Logon

System

System\Logon

System

System\Logon

System\Logon

System\Logon

System

Windows Components\Windows Media Center

Windows Components\Windows Media Center

Windows Components\Microsoft Management Console\Restricted/Permitted snap-in

Windows Components\Microsoft Management Console\Restricted/Permitted snap-ins

Windows Components\Microsoft Management Console\Restricted/Permitted snap-in

Windows Components\Microsoft Management Console

Windows Components\Microsoft Management Console

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

\Group Policy\Group Policy snap-in extensions

\Group Policy\Resultant Set of Policy snap-in extensions



mmc:MMC_RESTRICT

mmc:MMC_ExtensionSnapins


mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT


mmc:MMC_RESTRICT

mmc:MMC_RESTRICT




mmc:MMC_RESTRICT


mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT


mmc:MMC_RESTRICT


mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT



mmc:MMC_RESTRICT

\Group Policy

\Group Policy

\Group Policy

mmc:MMC_RESTRICT



mmc:MMC_RESTRICT

mmc:MMC_RESTRICT



mmc:MMC_RESTRICT


mmc:MMC_RESTRICT


mmc:MMC_RESTRICT




mmc:MMC_RESTRICT



mmc:MMC_RESTRICT

mmc:MMC_RESTRICT

mmc:MMC_RESTRICT


mmc:MMC_RESTRICT


mmc:MMC_RESTRICT



mmc:MMC_RESTRICT

mmc:MMC_RESTRICT



mmc:MMC_RESTRICT

\Group Policy



mmc:MMC_RESTRICT





mmc:MMC_RESTRICT



mmc:MMC_RESTRICT


mmc:MMC_RESTRICT


mmc:MMC_RESTRICT

mmc:MMC_RESTRICT








mmc:MMC_RESTRICT


mmc:MMC_RESTRICT

mmc:MMC_RESTRICT


mmc:MMC_RESTRICT


mmc:MMC_RESTRICT


mmc:MMC_RESTRICT

mmc:MMC_RESTRICT



mmc:MMC_RESTRICT


mmcsnapins:MMC_GroupPolicy

mmcsnapins:MMC_GroupPolicy

mmc:MMC_RESTRICT


mmc:MMC_RESTRICT


Windows Components\Windows Mobility Center

Windows Components\Windows Mobility Center

Windows Components\Presentation Settings

Windows Components\Presentation Settings

Troubleshooting and Diagnostics\Microsoft Support Diagnostic Tool



Windows Components\Windows Installer


























Troubleshooting and Diagnostics\MSI Corrupted File Recovery

Windows Components\Network Access Protection

Network\Network Connectivity Status Indicator





System\Net Logon

System\Net Logon\DC Locator DNS Records

System\Net Logon





System\Net Logon

System\Net Logon


System\Net Logon


System\Net Logon

System\Net Logon

System\Net Logon

System\Net Logon

System\Net Logon

System\Net Logon

System\Net Logon



System\Net Logon

System\Net Logon




System\Net Logon




Network\Network Connections




























Windows Components\Network Projector



Network\Offline Files











































Network\Microsoft Peer-to-Peer Networking Services

Network\Microsoft Peer-to-Peer Networking Services\Peer Name Resolution Protoco






Network\Microsoft Peer-to-Peer Networking Services







Windows Components\Parental Controls

Troubleshooting and Diagnostics\Application Compatibility Diagnostics






Network\BranchCache

Network\BranchCache

Network\BranchCache

Network\BranchCache

Network\BranchCache

Tablet PC\Tablet PC Pen Training

Tablet PC\Tablet PC Pen Training

System\Performance Control Panel






Troubleshooting and Diagnostics\Windows Boot Performance Diagnostics

Troubleshooting and Diagnostics\Windows Standby/Resume Performance Diagnosti

Troubleshooting and Diagnostics\Windows System Responsiveness Performance Di

Troubleshooting and Diagnostics\Windows Shutdown Performance Diagnostics

Troubleshooting and Diagnostics\Windows Performance PerfTrack

System\Power Management\Sleep Settings






System\Power Management\Notification Settings


System



System\Power Management

System\Power Management\Video and Display Settings






System\Power Management\Button Settings
























System\Power Management\Hard Disk Settings

System\Power Management\Hard Disk Settings





Windows Explorer\Previous Versions












Printers

Printers

Printers

Printers

Printers

Printers

Printers

Control Panel\Printers


Printers

Printers

Printers


Printers

Printers

Printers

Printers

Printers

Printers

Printers

Printers


Printers

Printers


Printers


Printers



Printers

Printers

Printers

Control Panel\Programs







Windows Components\Password Synchronization




Network\QoS Packet Scheduler\DSCP value of conforming packets

Network\QoS Packet Scheduler\DSCP value of non-conforming packets

Network\QoS Packet Scheduler\Layer-2 priority value







Network\QoS Packet Scheduler










Windows Components\Windows Reliability Analysis

Troubleshooting and Diagnostics\Windows Resource Exhaustion Detection and Reso

System\Recovery

System

System

System

wer:CAT_WindowsErrorReportingAdvanced

System\Remote Assistance






System\Removable Storage Access

































System\Remote Procedure Call






System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

System\Scripts

Troubleshooting and Diagnostics\Scripted Diagnostics



Troubleshooting and Diagnostics\Scheduled Maintenance

\OCR

\OCR

Windows Components\Security Center

Windows Components\Location and Sensors






System\Server Manager


System


System

System



Shared Folders

Shared Folders

Windows Components\HomeGroup

Windows Components\Network Sharing

System

System

System

System

Windows Explorer

Windows Components\Desktop Gadgets








Windows Components\Windows SideShow








Windows Components\Smart Card
















Windows Components\Server for NIS

Windows Components\Server for NIS

Network\SNMP

Network\SNMP

Network\SNMP

Windows Components\Sound Recorder

Windows Components\Sound Recorder

Start Menu and Taskbar



























































Windows Components\Windows System Resource Manager




System\System Restore

System\System Restore

Tablet PC\Input Panel


















Tablet PC\Accessories








Tablet PC\Hardware Buttons


Tablet PC\Pen UX Behaviors

Tablet PC\Pen UX Behaviors

Tablet PC\Pen Flicks Learning

Tablet PC\Pen Flicks Learning







Tablet PC\Cursors

Tablet PC\Cursors


















Windows Components\Task Scheduler














Network\TCPIP Settings\IPv6 Transition Technologies











Network\TCPIP Settings\Parameters

Windows Components\Remote Desktop Services\Remote Desktop Connection Clien




Windows Components\Remote Desktop Services\Remote Desktop Session Host\Dev



Windows Components\Remote Desktop Services\Remote Desktop Session Host\Co

Windows Components\Remote Desktop Services\Remote Desktop Session Host\Sec

Windows Components\Remote Desktop Services\Remote Desktop Session Host\Re



Windows Components\Remote Desktop Services\Remote Desktop Session Host\RD




Windows Components\Remote Desktop Services\Remote Desktop Session Host\Prin










Windows Components\Remote Desktop Services\Remote Desktop Session Host\Tem


Windows Components\Remote Desktop Services\Remote Desktop Session Host\Tem

Windows Components\Remote Desktop Services\RD Gateway


Windows Components\Remote Desktop Services\Remote Desktop Session Host\Lic


Windows Components\Remote Desktop Services\RD Licensing






Windows Components\Remote Desktop Services\Remote Desktop Session Host\Prof


Windows Components\Remote Desktop Services\RD Licensing


















Windows Components\Remote Desktop Services\Remote Desktop Session Host\Ses















Printer Redirection

Printer Redirection


terminalserver:TS_SESSIONS

terminalserver:TS_CONNECTIONS

terminalserver:TS_REDIRECTION


terminalserver:TS_REDIRECTION


Application Compatibility

terminalserver:TS_PRINT_REDIRECTION

terminalserver:TS_PRINT_REDIRECTION



terminalserver:TS_SESSION_TIME_LIMITS

terminalserver:TS_SESSION_TIME_LIMITS

terminalserver:TS_CONNECTIONS



terminalserver:TS_SD_Node

Windows Explorer

Windows Explorer

Windows Explorer

Tablet PC\Touch Input




System\Trusted Platform Module Services




Windows Components\Backup\Client














System\User Profiles






















Windows Components\BitLocker Drive Encryption\Fixed Data Drives

Windows Components\BitLocker Drive Encryption\Removable Data Drives

Windows Components\BitLocker Drive Encryption\Operating System Drives

Windows Components\BitLocker Drive Encryption





















System\Windows Time Service\Time Providers



System\Windows Time Service

Troubleshooting and Diagnostics

Troubleshooting and Diagnostics

Windows Components\Windows Calendar

Windows Components\Windows Calendar

Windows Components\Windows Anytime Upgrade

Windows Components\Windows Anytime Upgrade

Backup\Server

Backup\Server

Backup\Server

Backup\Server

Backup\Server

Windows Components\Windows Color System

Windows Components\Windows Color System

Network\Windows Connect Now



Windows Components\Windows Defender







Windows Explorer

inetres:IZ_LocalMachineZone

inetres:IZ_IntranetZone

inetres:IZ_TrustedSitesZone

inetres:IZ_InternetZone

inetres:IZ_RestrictedSitesZone

inetres:IZ_LocalMachineZoneLockdown

inetres:IZ_IntranetZoneLockdown

inetres:IZ_TrustedSitesZoneLockdown

inetres:IZ_InternetZoneLockdown

inetres:IZ_RestrictedSitesZoneLockdown































Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer\Common Open File Dialog



Windows Explorer

Windows Explorer


Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

Windows Explorer

System\Windows File Protection




\Windows Firewall

\Windows Firewall\Domain Profile

\Windows Firewall\Standard Profile



























Windows Components\Windows Mail




Windows Components\Windows Media Digital Rights Management

Windows Components\Windows Media Player\Playback

Windows Components\Windows Media Player\Networking




Windows Components\Windows Media Player\User Interface

Windows Components\Windows Media Player






Windows Components\Windows Media Player\Playback









Windows Components\Windows Messenger




Windows Components\Windows Remote Management (WinRM)\WinRM Service

Windows Components\Windows Remote Management (WinRM)\WinRM Client















Windows Components\Windows Remote Shell







Windows Components\Windows Update



















System

Windows Components\Shutdown Options

Windows Components\Shutdown Options

System

Windows Components\Windows Logon Options






System\Shutdown Options

Windows Components\Instant Search

Registry Information

HKLM\SOFTWARE\Policies\Microsoft\Windows\AxInstaller\AxISURLZonePolicies!InstallTrustedOCX, HKLM\SOFTWARE\Policies

HKLM\SOFTWARE\Policies\Microsoft\Windows\AxInstaller!ApprovedList, HKLM\SOFTWARE\Policies\Microsoft\Windows\AxInstal

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoServices

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddPage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoWindowsSetupPage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoRemovePage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromCDorFloppy

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromInternet

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddFromNetwork

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoChooseProgramsPage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoAddRemovePrograms

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!NoSupportInfo

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Uninstall!DefaultCategory

HKLM\Software\Policies\Microsoft\Windows\ADFS!DisallowFederationService

HKLM\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed

HKCU\Software\Policies\Microsoft\Windows\AppCompat!VDMDisallowed

HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisablePropPage

HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableEngine

HKLM\Software\Policies\Microsoft\Windows\AppCompat!AITEnable

HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableUAR

HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisablePCA

HKCU\Software\Policies\Microsoft\Windows\AppCompat!DisablePCA

HKLM\Software\Policies\Microsoft\Windows\AppCompat!DisableInventory

HKLM\Software\Policies\Microsoft\Windows\AppCompat!SbEnable

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!DefaultFileTypeRisk

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!SaveZoneInformation

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!HideZoneInfoOnProperties

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!HighRiskFileTypes

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!LowRiskFileTypes

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations!ModRiskFileTypes

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!ScanWithAntiVirus

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments!UseTrustedHandlers

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutorun

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutorun

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DontSetAutoplayCheckbox

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DontSetAutoplayCheckbox

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun

HKLM\Software\Policies\Microsoft\Windows\Explorer!NoAutoplayfornonVolume

HKCU\Software\Policies\Microsoft\Windows\Explorer!NoAutoplayfornonVolume

HKLM\SOFTWARE\Policies\Microsoft\Biometrics\Credential Provider!Domain Accounts

HKLM\SOFTWARE\Policies\Microsoft\Biometrics!Enabled

HKLM\SOFTWARE\Policies\Microsoft\Biometrics\Credential Provider!Enabled

HKLM\SOFTWARE\Policies\Microsoft\Biometrics\Credential Provider!SwitchTimeoutInSeconds

HKLM\Software\Policies\Microsoft\Windows\BITS!EnablePeercaching

HKLM\Software\Policies\Microsoft\Windows\BITS!DisableBranchCache

HKLM\Software\Policies\Microsoft\Windows\BITS!DisablePeerCachingClient

HKLM\Software\Policies\Microsoft\Windows\BITS!DisablePeerCachingServer

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxContentAge

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxCacheSize

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxDownloadTime

HKLM\Software\Policies\Microsoft\Windows\BITS!EnableBITSMaxBandwidth, HKLM\Software\Policies\Microsoft\Windows\BITS

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxBandwidthServed

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxJobsPerUser

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxJobsPerMachine

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxFilesPerJob

HKLM\Software\Policies\Microsoft\Windows\BITS!MaxRangesPerFile

HKLM\Software\Policies\Microsoft\Windows\BITS\Throttling!EnableMaintenanceLimits, HKLM\Software\Policies\Microsoft\Win

HKLM\Software\Policies\Microsoft\Windows\BITS\Throttling!EnableBandwidthLimits, HKLM\Software\Policies\Microsoft\Windo

HKLM\Software\Policies\Microsoft\Windows\BITS!JobInactivityTimeout

HKLM\Software\Policies\Microsoft\SQMClient!CorporateSQMURL

HKLM\Software\Policies\Microsoft\SQMClient\Windows!StudyId, HKLM\Software\Policies\Microsoft\SQMClient\Windows!StudyI

HKLM\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002!Functions

HKLM\Software\Policies\Microsoft\Windows\App Management!COMClassStore

HKCU\Software\Policies\Microsoft\Windows\App Management!COMClassStore

HKCU\Software\Policies\Microsoft\Conferencing!PersistAutoAcceptCalls

HKCU\Software\Policies\Microsoft\Conferencing!NoAppSharing

HKCU\Software\Policies\Microsoft\Conferencing!NoAudio

HKCU\Software\Policies\Microsoft\Conferencing!NoChat

HKCU\Software\Policies\Microsoft\Conferencing!NoDirectoryServices

HKCU\Software\Policies\Microsoft\Conferencing!NoFullDuplex

HKCU\Software\Policies\Microsoft\Conferencing!NoOldWhiteBoard

HKLM\Software\Policies\Microsoft\Conferencing!NoRDS

HKCU\Software\Policies\Microsoft\Conferencing!NoAdvancedCalling

HKCU\Software\Policies\Microsoft\Conferencing!NoNewWhiteBoard

HKCU\Software\Policies\Microsoft\Conferencing!Use AutoConfig, HKCU\Software\Policies\Microsoft\Conferencing!ConfigFile

HKCU\Software\Policies\Microsoft\Conferencing!NoAudioPage

HKCU\Software\Policies\Microsoft\Conferencing!NoGeneralPage

HKCU\Software\Policies\Microsoft\Conferencing!NoSecurityPage

HKCU\Software\Policies\Microsoft\Conferencing!NoVideoPage

HKCU\Software\Policies\Microsoft\Conferencing!MaximumBandwidth

HKCU\Software\Policies\Microsoft\Conferencing!MaxFileSendSize

HKCU\Software\Policies\Microsoft\Conferencing!NoAddingDirectoryServers

HKCU\Software\Policies\Microsoft\Conferencing!NoTrueColorSharing

HKCU\Software\Policies\Microsoft\Conferencing!NoAutoAcceptCalls

HKCU\Software\Policies\Microsoft\Conferencing!NoChangingCallMode

HKCU\Software\Policies\Microsoft\Conferencing!NoChangeDirectSound

HKCU\Software\Policies\Microsoft\Conferencing!NoAllowControl

HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDesktop

HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingFiles

HKCU\Software\Policies\Microsoft\Conferencing!NoReceivingVideo

HKCU\Software\Policies\Microsoft\Conferencing!NoSendingFiles

HKCU\Software\Policies\Microsoft\Conferencing!NoSendingVideo

HKCU\Software\Policies\Microsoft\Conferencing!NoSharing

HKCU\Software\Policies\Microsoft\Conferencing!NoSharingDosWindows

HKCU\Software\Policies\Microsoft\Conferencing!NoSharingExplorer

HKCU\Software\Policies\Microsoft\Conferencing!NoWebDirectory

HKCU\Software\Policies\Microsoft\Conferencing!CallSecurity

HKCU\Software\Policies\Microsoft\Conferencing!IntranetSupportURL

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceClassicControlPanel

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowCpl, HKCU\Software\Microsoft\Windows\CurrentVer

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoControlPanel

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictCpl, HKCU\Software\Microsoft\Windows\CurrentVers

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispCPL

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveActive

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!SetVisualStyle

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!SCRNSAVE.EXE

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispSettingsPage

HKCU\Software\Policies\Microsoft\Windows\Personalization!ThemeFile

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaverIsSecure

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoColorChoice

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoChangingWallPaper

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispBackgroundPage

HKCU\Software\Policies\Microsoft\Windows\Personalization!NoChangingMousePointers

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispScrSavPage

HKCU\Software\Policies\Microsoft\Windows\Personalization!NoChangingSoundScheme

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoThemesTab

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoVisualStyleChoice

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoDispAppearancePage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!NoSizeChoice

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveTimeOut

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!UseDefaultTile

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DefaultLogonDomain

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!ExcludedCredentialProviders

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowDefaultCredentials, HKLM\Software\Policies\Microsoft

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowDefCredentialsWhenNTLMOnly, HKLM\Software\Polici

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowFreshCredentials, HKLM\Software\Policies\Microsoft\

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowFreshCredentialsWhenNTLMOnly, HKLM\Software\Poli

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowSavedCredentials, HKLM\Software\Policies\Microsoft\

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!AllowSavedCredentialsWhenNTLMOnly, HKLM\Software\Pol

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!DenyDefaultCredentials, HKLM\Software\Policies\Microsoft

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!DenyFreshCredentials, HKLM\Software\Policies\Microsoft\

HKLM\Software\Policies\Microsoft\Windows\CredentialsDelegation!DenySavedCredentials, HKLM\Software\Policies\Microsoft\

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI!EnumerateAdministrators

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\CredUI!EnableSecureCredentialPrompting

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableChangePassword

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableLockWorkstation

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoLogoff

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableTaskMgr

HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!AllowLocalActivationSecurityCheckExemptionList

HKLM\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat!ListBox_Support_ActivationSecurityCheckExemptionList, H

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop\AdminComponent!Add, HKCU\Software\Microsoft\W

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoHTMLWallPaper

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Wallpaper, HKCU\Software\Microsoft\Windows\CurrentVersi

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktop

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoComponents

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsNetHood

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSaveSettings

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceActiveDesktopOn

HKCU\Software\Policies\Microsoft\Windows\Directory UI!EnableFilter

HKCU\Software\Policies\Microsoft\Windows\Directory UI!HideDirectoryFolder

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktop

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetIcon

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetHood

HKCU\Software\Policies\Microsoft\Windows\Directory UI!QueryLimit

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCloseDragDropBands

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoAddingComponents

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMovingBands

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoActiveDesktopChanges

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoClosingComponents

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoDeletingComponents

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop!NoEditingComponents

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisablePersonalDirChange

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{20D04FE0-3AEA-1069-A2D8-08002B30309D}

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{450D8FBA-AD25-11D0-98A8-0800361B1103}

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyComputer

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesMyDocuments

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPropertiesRecycleBin

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum!{645FF040-5081-101B-9F08-00AA002F954E}

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDesktopCleanupWizard

HKCU\Software\Policies\Microsoft\Windows\Explorer!NoWindowMinimizingShortcuts

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!AllowAdminInstall

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!AllowDeviceIDs, HKLM\Software\Policies\Microsoft\Windo

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!AllowDeviceClasses, HKLM\Software\Policies\Microsoft\W

HKLM\Software\Policies\Microsoft\Windows\DriverInstall\Restrictions!AllowUserDeviceClasses, HKLM\Software\Policies\Microso

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!AllowRemoteRPC

HKCU\Software\Policies\Microsoft\Windows NT\Driver Signing!BehaviorOnFailedVerify

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!InstallTimeout

HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchFloppies, HKCU\Software\Policies\Microsoft\Window

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DeniedPolicy!SimpleText

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DeniedPolicy!DetailText

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!DisableSendGenericDriverNotFoundToWER

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!DisableSystemRestore

HKLM\SOFTWARE\Policies\Microsoft\Windows\Device Metadata!PreventDeviceMetadataFromNetwork

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyUnspecified

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyDeviceIDs, HKLM\Software\Policies\Microsoft\Windo

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyDeviceClasses, HKLM\Software\Policies\Microsoft\W

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!DenyRemovableDevices

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!DisableSendRequestAdditionalSoftwareToWER

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!AllSigningEqual

HKLM\Software\Policies\Microsoft\Windows\DriverSearching!SearchOrderConfig

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Restrictions!ForceReboot, HKLM\Software\Policies\Microsoft\Windows

HKLM\Software\Policies\Microsoft\Windows\DeviceInstall\Settings!DisableBalloonTips

HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate

HKCU\Software\Policies\Microsoft\Windows\DriverSearching!DontPromptForWindowsUpdate

HKLM\Software\Policies\Microsoft\Windows\DeviceRedirect\Restrictions!DenyDeviceIDs, HKLM\Software\Policies\Microsoft\Wi

HKLM\Software\Policies\Microsoft\Windows\DeviceRedirect\Restrictions!AllowRedirect

HKLM\Software\Policies\Microsoft\System\DFSClient!DfsDcNameDelay

HKLM\SOFTWARE\Policies\Microsoft\Windows\Digital Locker!DoNotRunDigitalLocker

HKCU\SOFTWARE\Policies\Microsoft\Windows\Digital Locker!DoNotRunDigitalLocker

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{29689E29-2CE9-4751-B4FC-8EFF5066E3FD}!DfdAlertTextOverride

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{29689E29-2CE9-4751-B4FC-8EFF5066E3FD}!ScenarioExecutionEnabled

HKLM\Software\Policies\Microsoft\Windows\NvCache!OptimizeBootAndResume

HKLM\Software\Policies\Microsoft\Windows\NvCache!EnablePowerModeState

HKLM\Software\Policies\Microsoft\Windows\NvCache!EnableNvCache

HKLM\Software\Policies\Microsoft\Windows\NvCache!EnableSolidStateMode

HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!ApplyToRemovableMedia

HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Limit, HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Lim

HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enable

HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!Enforce

HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverLimit

HKLM\Software\Policies\Microsoft\Windows NT\DiskQuota!LogEventOverThreshold

HKLM\Software\Policies\Microsoft\Windows\System!DLT_AllowDomainMode

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!AppendToMultiLabelName

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!AdapterDomainName

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!NameServer

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!SearchList

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationEnabled

HKLM\Software\Policies\Microsoft\System\DNSClient!NV PrimaryDnsSuffix

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UseDomainNameDevolution

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!EnableDevolutionLevelControl, HKLM\Software\Policies\Microsoft

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterAdapterName

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegisterReverseLookup

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationRefreshInterval

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationOverwritesInConflict

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!RegistrationTtl

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!EnableMulticast

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateSecurityLevel

HKLM\Software\Policies\Microsoft\Windows NT\DNSClient!UpdateTopLevelDomainZones

HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowColorizationColorChanges

HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowColorizationColorChanges

HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowComposition

HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowComposition

HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowFlip3d

HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowFlip3d

HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowAnimations

HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DisallowAnimations

HKLM\SOFTWARE\Policies\Microsoft\Windows\DWM!DefaultColorizationColorState, HKLM\SOFTWARE\Policies\Microsoft\Win

HKCU\SOFTWARE\Policies\Microsoft\Windows\DWM!DefaultColorizationColorState, HKCU\SOFTWARE\Policies\Microsoft\Win

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoEncryptOnMove

HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices!AllowCertSiloProvisioning

HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices!RootHubConnectedEnStorDevices

HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices\ApprovedEnStorDevices!PolicyEnabled, HKLM\Software\

HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices\ApprovedSilos!SiloAllowListPolicy, HKLM\Software\Polic

HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices!DisallowLegacyDiskDevices

HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices!DisablePasswordAuthentication

HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices!LockDeviceOnMachineLock

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!CorporateWerServer, HKLM\SOFTWARE\Policies\Mic

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultConsent

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultConsent

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\DW!DWNoExternalURL, HKLM\Software\Policies\Microsoft\PCHeal

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableArchive, HKLM\SOFTWARE\Policies\Microsoft

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableArchive, HKCU\SOFTWARE\Policies\Microsoft

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableQueue, HKLM\SOFTWARE\Policies\Microsoft\

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DisableQueue, HKCU\SOFTWARE\Policies\Microsoft\

HKLM\

HKCU\

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!AllOrNone, HKLM\Software\Policies\Microsoft\PCHealth\ErrorRepo

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!LoggingDisabled

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!LoggingDisabled

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!Disabled

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!Disabled

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!ShowUI, HKLM\Software\Policies\Microsoft\PCHealth\ErrorRepor

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DontSendAdditionalData

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DontSendAdditionalData

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultOverrideBehavior

HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent!DefaultOverrideBehavior

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\InclusionList

HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting\ExcludedApplications

HKCU\Software\Policies\Microsoft\Windows\Windows Error Reporting\ExcludedApplications

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting\ExclusionList

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting!DontShowUI

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeKernelFaults

HKLM\Software\Policies\Microsoft\Windows\EventLog\EventForwarding\SubscriptionManager

HKLM\Software\Policies\Microsoft\Windows\EventLog\EventForwarding!MaxForwardingRate

HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!AutoBackupLogFiles

HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!AutoBackupLogFiles

HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!AutoBackupLogFiles

HKLM\Software\Policies\Microsoft\Windows\EventLog\System!AutoBackupLogFiles

HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!ChannelAccess

HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!ChannelAccess

HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!ChannelAccess

HKLM\Software\Policies\Microsoft\Windows\EventLog\System!ChannelAccess

HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!File

HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!File

HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!File

HKLM\Software\Policies\Microsoft\Windows\EventLog\System!File

HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!MaxSize

HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!MaxSize

HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!MaxSize

HKLM\Software\Policies\Microsoft\Windows\EventLog\System!MaxSize

HKLM\Software\Policies\Microsoft\Windows\EventLog\Application!Retention

HKLM\Software\Policies\Microsoft\Windows\EventLog\Security!Retention

HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!Retention

HKLM\Software\Policies\Microsoft\Windows\EventLog\System!Retention

HKLM\Software\Policies\Microsoft\Windows\EventLog\Setup!Enabled

HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgram

HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionProgramCommandLineParameters

HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftRedirectionURL

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!AlwaysShowClassicMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreventItemCreationInUsersFilesFolder

HKLM\Software\Policies\Microsoft\Windows\Explorer!AdminInfoUrl

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TurnOffSPIAnimations

HKLM\Software\Policies\Microsoft\Windows\Explorer!NoDataExecutionPrevention

HKLM\Software\Policies\Microsoft\Windows\Explorer!NoHeapTerminationOnCorruption

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{8519d925-541e-4a2b-8b1e-8059d16082f2}!ScenarioExecutionEnabled, H

HKLM\System\CurrentControlSet\Policies!DisableDeleteNotification

HKLM\System\CurrentControlSet\Policies!NtfsDisableCompression

HKLM\System\CurrentControlSet\Policies!NtfsDisableEncryption

HKLM\System\CurrentControlSet\Policies!NtfsEncryptPagingFile

HKLM\Software\Policies\Microsoft\Windows\Filesystems\NTFS!SymLinkState, HKLM\Software\Policies\Microsoft\Windows\Fil

HKLM\System\CurrentControlSet\Policies!NtfsDisable8dot3NameCreation

HKCU\Software\Policies\Microsoft\Windows\NetCache!DisableFRAdminPin

HKLM\Software\Policies\Microsoft\Windows\System\Fdeploy!LocalizeXPRelativePaths

HKCU\Software\Policies\Microsoft\Windows\System\Fdeploy!LocalizeXPRelativePaths

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPreviewPane

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoReadingPane

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{dc42ff48-e40d-4a60-8675-e71f7e64aa9a}!ScenarioExecutionEnabled, HK

HKLM\Software\Policies\Microsoft\Windows\GameUX!DownloadGameInfo

HKLM\Software\Policies\Microsoft\Windows\GameUX!GameUpdateOptions

HKLM\Software\Policies\Microsoft\Windows\GameUX!ListRecentlyPlayed

HKCU\Software\Policies\Microsoft\Control Panel\International\Calendars\TwoDigitYearMax!1

HKLM\Software\Policies\Microsoft\Control Panel\International!PreventGeoIdChange

HKCU\Software\Policies\Microsoft\Control Panel\International!PreventGeoIdChange

HKLM\Software\Policies\Microsoft\Control Panel\International!CustomLocalesNoSelect

HKCU\Software\Policies\Microsoft\Control Panel\International!CustomLocalesNoSelect

HKLM\Software\Policies\Microsoft\Control Panel\International!PreventUserOverrides

HKCU\Software\Policies\Microsoft\Control Panel\International!PreventUserOverrides

HKLM\Software\Policies\Microsoft\MUI\Settings!MachineUILock

HKCU\Software\Policies\Microsoft\Control Panel\International!HideAdminOptions

HKCU\Software\Policies\Microsoft\Control Panel\International!HideCurrentLocation

HKCU\Software\Policies\Microsoft\Control Panel\International!HideLanguageSelection

HKCU\Software\Policies\Microsoft\Control Panel\International!HideLocaleSelectAndCustomize

HKCU\Software\Policies\Microsoft\Control Panel\Desktop!MultiUILanguageID

HKLM\Software\Policies\Microsoft\Control Panel\International!RestrictSystemLocales, HKLM\Software\Policies\Microsoft\Contro

HKLM\Software\Policies\Microsoft\Control Panel\International!RestrictUserLocales, HKLM\Software\Policies\Microsoft\Control P

HKCU\Software\Policies\Microsoft\Control Panel\International!RestrictUserLocales, HKCU\Software\Policies\Microsoft\Control P

HKLM\Software\Policies\Microsoft\MUI\Settings!PreferredUILanguages

HKCU\Software\Policies\Microsoft\Control Panel\Desktop!PreferredUILanguages

HKLM\Software\Policies\Microsoft\Windows\System!AllowX-ForestPolicy-and-RUP

HKLM\Software\Policies\Microsoft\Windows\Group Policy!OnlyUseLocalAdminFiles

HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!NewGPOLinksDisabled

HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!GPODisplayName

HKLM\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser

HKCU\Software\Policies\Microsoft\Windows\System!DenyRsopToInteractiveUser

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3610eda5-77ef-11d2-8dc5-00c04fa31a66}!NoSlowLink, HKLM\Softwa

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B1BE8D72-6EAC-11D2-A4EA-00C04F79F83A}!NoSlowLink, HKLM\S

HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!ShowPoliciesOnly

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{25537BA6-77A8-11D2-9B6C-0000F8080861}!NoSlowLink, HKLM\So

HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DCOption

HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKLM\Software\Policies\Microsoft\Windows\Sys

HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTimeDC, HKLM\Software\Policies\Microsoft\Windows

HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyRefreshTime, HKCU\Software\Policies\Microsoft\Windows\Sys

HKLM\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate

HKCU\Software\Policies\Microsoft\Windows\System!GroupPolicyMinTransferRate

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A2E30F80-D7DE-11d2-BBDE-00C04F86AE3B}!NoSlowLink, HKLM\S

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{e437bc1c-aa7d-11d2-a382-00c04f991e27}!NoSlowLink, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}!NoBackgroundPolic

HKLM\Software\Policies\Microsoft\Windows\System!DenyUsersFromMachGP

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{42B5FAAE-6536-11d2-AE5A-0000F87571E3}!NoSlowLink, HKLM\So

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}!NoBackgroundPolicy

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{c6dc5466-785a-11d2-84d0-00c04fb169f7}!NoSlowLink, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\System!GpNetworkStartTimeoutPolicyValue

HKCU\Software\Policies\Microsoft\Windows\Group Policy Editor!DisableAutoADMUpdate

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableBkGndGroupPolicy

HKLM\Software\Policies\Microsoft\Windows\System!DisableLGPOProcessing

HKLM\Software\Policies\Microsoft\Windows\System!RSoPLogging

HKLM\Software\Policies\Microsoft\Windows\System!UserPolicyMode

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B587E2B1-4D59-4e7e-AED9-22B9DF11D053}!NoSlowLink, HKLM\S

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0ACDD40C-75AC-47ab-BAA0-BF6DE7E7FE63}!NoSlowLink, HKLM\

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{F9C77450-3A41-477E-9310-9ACD617BD9E3}!NoSlowLink, HKLM\So

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{F9C77450-3A41-477E-9310-9ACD617BD9E3}!LogLevel, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{728EE579-943C-4519-9EF7-AB56765798ED}!LogLevel, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{1A6364EB-776B-4120-ADE1-B63A406A76B5}!LogLevel, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{5794DAFD-BE60-433f-88A2-1A31939AC01F}!LogLevel, HKLM\Softwa

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0E28E245-9368-4853-AD84-6DA3BA35BB75}!LogLevel, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{7150F9BF-48AD-4da4-A49C-29EF4A8369BA}!LogLevel, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A3F3E39B-5D83-4940-B954-28315B82F0A8}!LogLevel, HKLM\Softwa

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{6232C319-91AC-4931-9385-E70C2B099F0E}!LogLevel, HKLM\Softwa

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{74EE6C03-5363-4554-B161-627540339CAB}!LogLevel, HKLM\Softwa

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E47248BA-94CC-49c4-BBB5-9EB7F05183D0}!LogLevel, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{17D89FEC-5C44-4972-B12D-241CAEF74509}!LogLevel, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3A0DBA37-F8B2-4356-83DE-3E90BD5C261F}!LogLevel, HKLM\Soft

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{6A4C88C6-C502-4f74-8F60-2CB23EDC24E2}!LogLevel, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E62688F0-25FD-4c90-BFF5-F508B9D2E31F}!LogLevel, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}!LogLevel, HKLM\Soft

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E5094040-C46C-4115-B030-04FB2E545B00}!LogLevel, HKLM\Softwa

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B087BE9D-ED37-454f-AF9C-04291E351182}!LogLevel, HKLM\Softwa

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{AADCED64-746C-4633-A97C-D61349046527}!LogLevel, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{91FBB303-0CD5-4055-BF42-E512A681B325}!LogLevel, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}!LogLevel, HKLM\Soft

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E4F48E54-F38D-4884-BFB9-D4D2E5729C18}!LogLevel, HKLM\Softw

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{728EE579-943C-4519-9EF7-AB56765798ED}!NoSlowLink, HKLM\Sof

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{1A6364EB-776B-4120-ADE1-B63A406A76B5}!NoSlowLink, HKLM\So

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{5794DAFD-BE60-433f-88A2-1A31939AC01F}!NoSlowLink, HKLM\Sof

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{0E28E245-9368-4853-AD84-6DA3BA35BB75}!NoSlowLink, HKLM\So

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{7150F9BF-48AD-4da4-A49C-29EF4A8369BA}!NoSlowLink, HKLM\So

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{A3F3E39B-5D83-4940-B954-28315B82F0A8}!NoSlowLink, HKLM\Sof

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{6232C319-91AC-4931-9385-E70C2B099F0E}!NoSlowLink, HKLM\Sof

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{74EE6C03-5363-4554-B161-627540339CAB}!NoSlowLink, HKLM\Sof

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E47248BA-94CC-49c4-BBB5-9EB7F05183D0}!NoSlowLink, HKLM\So

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{17D89FEC-5C44-4972-B12D-241CAEF74509}!NoSlowLink, HKLM\So

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{3A0DBA37-F8B2-4356-83DE-3E90BD5C261F}!NoSlowLink, HKLM\So

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{6A4C88C6-C502-4f74-8F60-2CB23EDC24E2}!NoSlowLink, HKLM\So

HKCU\Software\Policies\Microsoft\MMC\{6A712058-33C6-4046-BCF9-0EA3A8808EDC}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{0DA274B5-EB93-47A7-AAFB-65BA532D3FE6}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{17C6249E-BA57-4F69-AE93-4FB3D25CD9D7}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{127537A8-C1ED-40BC-9AE5-C5891DF6B2D4}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{1612b55c-243c-48dd-a449-ffc097b19776}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{1b767e9a-7be4-4d35-85c1-2e174a7ba951}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{2EA1A81B-48E5-45E9-8BB7-A6E3AC170006}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{35141B6B-498A-4cc7-AD59-CEF93D89B2CE}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{3BAE7E51-E3F4-41D0-853D-9BB9FD47605F}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{3BFAE46A-7F3A-467B-8CEA-6AA34DC71F53}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{3EC4E9D3-714D-471F-88DC-4DD4471AAB47}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{516FC620-5D34-4B08-8165-6A06B623EDEB}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{5C935941-A954-4F7C-B507-885941ECE5C4}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{79F92669-4224-476c-9C5C-6EFB4D87DF4A}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{949FB894-E883-42C6-88C1-29169720E8CA}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{BFCBBEB0-9DF4-4c0c-A728-434EA66A0373}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{9AD2BAFE-63B4-4883-A08C-C3C6196BCAFD}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{45B01F1C-5AC2-458c-9457-42A81B34A26D}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{A8C42CEA-CDB8-4388-97F4-5831F933DA84}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{B9CCA4DE-E2B9-4CBD-BF7D-11B6EBFBDDF7}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{BEE07A6A-EC9F-4659-B8C9-0B1937907C83}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{CAB54552-DEEA-4691-817E-ED4A4D1AFC72}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{CC5746A9-9B74-4be5-AE2E-64379C86E0E4}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{CEFFA6E2-E3BD-421B-852C-6F6A79A59BC1}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{CF848D48-888D-4F45-B530-6A201E62A605}!Restrict_Run

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E62688F0-25FD-4c90-BFF5-F508B9D2E31F}!NoSlowLink, HKLM\Sof

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{BC75B1ED-5833-4858-9BB8-CBF0B166DF9D}!NoSlowLink, HKLM\S

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E5094040-C46C-4115-B030-04FB2E545B00}!NoSlowLink, HKLM\Sof

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{B087BE9D-ED37-454f-AF9C-04291E351182}!NoSlowLink, HKLM\Sof

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{AADCED64-746C-4633-A97C-D61349046527}!NoSlowLink, HKLM\So

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{91FBB303-0CD5-4055-BF42-E512A681B325}!NoSlowLink, HKLM\Sof

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{C418DD9D-0D14-4efb-8FBF-CFE535C8FAC7}!NoSlowLink, HKLM\S

HKLM\Software\Policies\Microsoft\Windows\Group Policy\{E4F48E54-F38D-4884-BFB9-D4D2E5729C18}!NoSlowLink, HKLM\So

HKLM\Software\Policies\Microsoft\Windows\System!ProcessTSUserLogonAsync

HKLM\Software\Policies\Microsoft\Windows\System!HelpQualifiedRootDir

HKLM\Software\Policies\Microsoft\Windows\System!DisableInHelp

HKCU\Software\Policies\Microsoft\Windows\System!DisableInHelp

HKLM\Software\Policies\Microsoft\Windows\System!DisableHHDEP

HKLM\Software\Policies\Microsoft\Assistance\Client\1.0!NoActiveHelp

HKCU\Software\Policies\Microsoft\Assistance\Client\1.0!NoImplicitFeedback

HKCU\Software\Policies\Microsoft\Assistance\Client\1.0!NoExplicitFeedback

HKCU\Software\Policies\Microsoft\Assistance\Client\1.0!NoOnlineAssist

HKLM\Software\policies\Microsoft\System\HotStart!NoHotStart

HKCU\Software\policies\Microsoft\System\HotStart!NoHotStart

HKLM\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKLM\Software\Microsoft\Windows\CurrentVers

HKCU\Software\Policies\Microsoft\InternetManagement!RestrictCommunication, HKCU\Software\Microsoft\Windows\CurrentVers

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!DisableWindowsUpdateAccess

HKLM\Software\Policies\Microsoft\SystemCertificates\AuthRoot!DisableRootAutoUpdate

HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload

HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPnPDownload

HKLM\Software\Policies\Microsoft\EventViewer!MicrosoftEventVwrDisableLinks

HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!Headlines

HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc!MicrosoftKBSearch

HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard!ExitOnMSICW

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWebServices

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInternetOpenWith

HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting

HKCU\Software\Policies\Microsoft\Windows NT\Printers!DisableHTTPPrinting

HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control!NoRegistration

HKLM\Software\Policies\Microsoft\SearchCompanion!DisableContentFileUpdates

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoOnlinePrintsWizard

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoPublishingWizard

HKLM\Software\Policies\Microsoft\Messenger\Client!CEIP

HKCU\Software\Policies\Microsoft\Messenger\Client!CEIP

HKLM\Software\Policies\Microsoft\SQMClient\Windows!CEIPEnable

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!DoReport, HKLM\Software\Policies\Microsoft\Windows\Windows Err

HKLM\Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator!NoActiveProbe

HKLM\Software\Policies\Microsoft\Windows\DriverSearching!DontSearchWindowsUpdate

HKLM\Software\Policies\Microsoft\Windows NT\IIS!PreventIISInstall

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1406

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1406









HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1406

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1406









HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!AddPolicySearchProviders

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!AddPolicySearchProviders

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID, HKLM\Software\Microsoft\Windows\Cur

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!ListBox_Support_CLSID, HKCU\Software\Microsoft\Windows\Cu

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors, HKLM\Software

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_AllowedBehaviors, HKCU\Softwar

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!*

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt!*

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Sett

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\Sett











HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoWebJITSetup

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoJITSetup





































































































HKLM\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures

HKCU\Software\Policies\Microsoft\Internet Explorer\Download!RunInvalidSignatures





















HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Show image placeholders

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Print_Background

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Enable Browser Extensions

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!120A

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!120A









HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!120A

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!120A

















































HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{05589FA1-C356-11CE-BF01-0

HKLM\Software\Policies\Microsoft\Internet Explorer\CommandBar!FrameToolbarAutoHide

HKCU\Software\Policies\Microsoft\Internet Explorer\CommandBar!FrameToolbarAutoHide









































HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NoUpdateCheck

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{DED22F57-FEE2-11D0-953B

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CertificateRevocation

HKLM\Software\Policies\Microsoft\Internet Explorer\Download!CheckExeSignatures

HKCU\Software\Policies\Microsoft\Internet Explorer\Download!CheckExeSignatures

HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy!ClearBrowsingHistoryOnExit

HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy!ClearBrowsingHistoryOnExit

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!No_LaunchMediaBar, HKCU\Software\Microsoft\Internet Explo

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!NewTabAction

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!NewTabAction

HKCU\Software\Microsoft\Outlook Express!BlockExeAttachments

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!SpecifyDefaultButtons, HKCU\Software\Microsoft\Windows\

HKLM\Software\Policies\Microsoft\Internet Explorer\CommandBar!TextOption

HKCU\Software\Policies\Microsoft\Internet Explorer\CommandBar!TextOption

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent!Version

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent!Version

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!RestrictToList

HKLM\

HKCU\

HKLM\

HKCU\

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2D360201-FFF5-11D1-8D03-

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!History, HKLM\Software\Policies\Microsoft\Windows\CurrentV

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!History, HKCU\Software\Policies\Microsoft\Windows\CurrentV





















HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingChannels

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoAddingSubscriptions

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoScheduledUpdates

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Use FormSuggest, HKCU\Software\Policies\Microsoft\Internet Explor

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoJITSetup

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnableAutoProxyResultCache

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Accessibility

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Advanced

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Autoconfig

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Autoconfig

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!CalendarContact

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Certificates

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Colors

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Connection Settings, HKLM\Software\Policies\Microsoft\Inte

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Connection Settings

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Check_If_Default

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Fonts

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!HomePage, HKCU\Software\Policies\Microsoft\Internet Explo

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Languages

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!links

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Messaging

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Profiles

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Proxy

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Proxy

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Ratings

HKCU\

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Cache

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelUI

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserContextMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarCustomize

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoBandCustomize

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSubscriptionContent

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingScheduleGroups

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoEditingSubscriptions

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExternalBranding

HKCU\Software\Policies\Microsoft\Internet Explorer!DisableImportExportFavorites

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Connwiz Admin Lock

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChannelLogging

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoOpeninNewWnd

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoUpdateCheck

HKLM\Software\Policies\Microsoft\Internet Explorer\Security\ActiveX!BlockNonAdminActiveXInstall

HKCU\Software\Policies\Microsoft\Internet Explorer\Security\ActiveX!BlockNonAdminActiveXInstall

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingChannels

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoRemovingSubscriptions

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoSelectDownloadDir

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSplash

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoMSAppLogo5ChannelNotify

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!AdvancedTab

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ConnectionsTab

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ContentTab

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!GeneralTab

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!PrivacyTab

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ProgramsTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!ResetWebSettings

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!SecurityTab

HKLM\Software\Policies\Microsoft\Internet Explorer\Safety\PrivacIE!DisableToolbars

HKCU\Software\Policies\Microsoft\Internet Explorer\Safety\PrivacIE!DisableToolbars

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisplayScriptDownloadFailureUI





















HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableRIED

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableRIED

HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoExtensionManagement

HKLM\Software\Policies\Microsoft\Internet Explorer\Safety\PrivacIE!DisableLogging

HKCU\Software\Policies\Microsoft\Internet Explorer\Safety\PrivacIE!DisableLogging

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04









HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1A04

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1A04









HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DisableCachingOfSSLPages









































HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache!Persistent

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!XMLHTTP

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!XMLHTTP

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus, HKLM\Software\Policies\Microsoft\Internet Explor

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus, HKCU\Software\Policies\Microsoft\Internet Explor

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserClose

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileNew

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFileOpen

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoBrowserSaveWebComplete

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserSaveAs

HKCU\Software\Policies\Microsoft\Internet Explorer\Persistence\3!DomainLimit, HKCU\Software\Policies\Microsoft\Internet Exp





HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemNetscapeHelp

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemSendFeedback

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTipOfTheDay

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpItemTutorial

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFavorites

HKLM\Software\Policies\Microsoft\Internet Explorer\CommandBar!CommandBarEnabled

HKCU\Software\Policies\Microsoft\Internet Explorer\CommandBar!CommandBarEnabled

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!StatusBarWeb

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!StatusBarWeb

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Identities!Locked Down





















HKLM\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation!MSCompatibilityMode

HKCU\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation!MSCompatibilityMode





















HKLM\Software\Policies\Microsoft\Internet Explorer\Safety\PrivacIE!Threshold, HKLM\Software\Policies\Microsoft\Internet Explo

HKCU\Software\Policies\Microsoft\Internet Explorer\Safety\PrivacIE!Threshold, HKCU\Software\Policies\Microsoft\Internet Explo

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKLM\Software\P

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKLM\Softw

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKLM\Softwa

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved)

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKLM\Softwa

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HK

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HK

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKLM\Sof

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKLM\Soft

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved),

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved),

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HK

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt!(

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS!(Reserved), HKCU\Software\P

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING!(Reserved), HKCU\Softw

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND!(Reserved), HKCU\Softwa

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN!(Reserved)

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING!(Reserved), HKCU\Softwa

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL!(Reserved), HK

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN!(Reserved), HK

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING!(Reserved), HKCU\Sof

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION!(Reserved), HKCU\Soft

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL!(Reserved),

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD!(Reserved),

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS!(Reserved), HK

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Script_Paste_URLAction_If_Prompt!(

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\RestrictedProtocols!ListBox_Support_3, HKLM\

HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\RestrictedProtocols!ListBox_Support_3, HKCU\

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKLM\Soft

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Template Policies!InternetZoneTemplate, HKCU\Soft

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!IntranetName

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!UNCAsIntranet

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!ProxyByPass



HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKLM\Soft

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Settings\Template Policies!IntranetZoneTemplate, HKCU\Soft

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{9276B91A-E780-11d2-8A8D-0

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00









HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1C00

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1C00



















































HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZoneT

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Settings\Template Policies!LocalMachineZone

HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbar!Locked

HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbar!Locked

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdow

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Lockdown Settings\Template Policies!InternetZoneLockdow

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdow

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Intranet Lockdown Settings\Template Policies!IntranetZoneLockdow

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalM

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Local Machine Zone Lockdown Settings\Template Policies!LocalM

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedS

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Lockdown Settings\Template Policies!RestrictedS

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZ

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Lockdown Settings\Template Policies!TrustedSitesZ









































HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ProxySettingsPerUser

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER!iexp

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER!iexp

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER!iexplor

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER!iexplor

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{275E2FE0-7486-11D0-89D6-0

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D45FD31B-5C6E-11D1-9EC1

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D6526FE0-E651-11CF-99CB-

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{AE24FDAE-03C6-11D1-8B76-

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{BD1F006E-174F-11D2-95C0-

HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbar\WebBrowser!ITBar7Position

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{2FF18E10-DE11-11D1-8161-





















HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{26F24A93-1DA2-11D0-A334-

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!120b





HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!120b





HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!120b





HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!120b





HKLM\Software\Policies\Microsoft\Windows\AxInstaller!OnlyUseAXISForActiveXInstall

HKCU\Software\Policies\Microsoft\Windows\AxInstaller!OnlyUseAXISForActiveXInstall





















HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Animations

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Play_Background_Sounds

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Videos

HKLM\Software\Policies\Microsoft\Internet Explorer\New Windows!ListBox_Support_Allow, HKLM\Software\Policies\Microsoft\I

HKCU\Software\Policies\Microsoft\Internet Explorer\New Windows!ListBox_Support_Allow, HKCU\Software\Policies\Microsoft\I

HKLM\Software\Policies\Microsoft\Internet Explorer\Security!DisableFixSecuritySettings

HKCU\Software\Policies\Microsoft\Internet Explorer\Security!DisableFixSecuritySettings

HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter!PreventOverride

HKCU\Software\Policies\Microsoft\Internet Explorer\PhishingFilter!PreventOverride

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AutoSearch

HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy!CleanCookies

HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy!CleanCookies

HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy!UseAllowList

HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy!UseAllowList

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteForms

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteForms

HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy!CleanInPrivateBlocking

HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy!CleanInPrivateBlocking

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeletePasswords

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeletePasswords

HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy!CleanTIF

HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy!CleanTIF

HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy!CleanHistory

HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy!CleanHistory

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!PreventIgnoreCertErrors

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!PreventIgnoreCertErrors

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchBox

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchBox

HKLM\Software\Policies\Microsoft\Internet Explorer\SQM!DisableCustomerImprovementProgram

HKCU\Software\Policies\Microsoft\Internet Explorer\SQM!DisableCustomerImprovementProgram

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!DisableFirstRunCustomize

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!DisableFirstRunCustomize

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!CodeBaseSearchPath

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion!IEAKUpdateUrl

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!Settings

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!Settings

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Use_DlgBox_Colors

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoDefaultTextSize, HKCU\Software\Policies\Microsoft\Intern

HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Background Color

HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Text Color

HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Anchor Color Visited

HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Anchor Color

HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Anchor Color Hover

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMEN

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS, HKLM\Soft

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING, HKLM

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND, HKLM\

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_LO

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING, HKLM\

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTO

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDO

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING, HK

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION, HKL

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXIN

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOW

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTI

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_Feature_Enable_Script_Paste_URLA

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ADDON_MANAGEMEN

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_BEHAVIORS, HKCU\Soft

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_HANDLING, HKCU

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_SECURITYBAND, HKCU\

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_LOCALMACHINE_L

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_MIME_SNIFFING, HKCU\

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_DISABLE_MK_PROTO

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_PROTOCOL_LOCKDO

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_OBJECT_CACHING, HK

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_ZONE_ELEVATION, HK

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_ACTIVEXI

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_RESTRICT_FILEDOW

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_FEATURE_WINDOW_RESTRICTI

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl!ListBox_Support_Feature_Enable_Script_Paste_URLA

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChangeDefaultSearchProvider

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoChangeDefaultSearchProvider

HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UsePolicySearchProvidersOnly

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!UsePolicySearchProvidersOnly



HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemp

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Restricted Sites Settings\Template Policies!RestrictedSitesZoneTemp









































HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoFindFiles

HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!NoSearchCustomization

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_zones_map_edit

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_options_edit

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!Security_HKLM_only

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnablePunyCode

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnablePunyCode

HKLM\Software\Policies\Microsoft\Internet Explorer\CommandBar!ShowLeftAddressToolbar

HKCU\Software\Policies\Microsoft\Internet Explorer\CommandBar!ShowLeftAddressToolbar

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!TabProcGrowth

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!TabProcGrowth

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\AllowedControls!{D27CDB6E-AE6D-11CF-96B8-

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey, HKLM\Software\Po

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ListBox_Support_ZoneMapKey, HKCU\Software\Po

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05









HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3!1E05

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3!1E05





























HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions!MaxSubscriptionSize, HKCU\Software\Policies\Micr

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoBrowserOptions



HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate,

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Trusted Sites Settings\Template Policies!TrustedSitesZoneTemplate

HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteBrowsingHistory

HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel!DisableDeleteBrowsingHistory

HKLM\Software\Policies\Microsoft\Internet Explorer\Activities!NoActivities

HKCU\Software\Policies\Microsoft\Internet Explorer\Activities!NoActivities

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!NoFirsttimeprompt

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Ext!NoFirsttimeprompt

HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableAddRemove

HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableAddRemove

HKLM\Software\Policies\Microsoft\Internet Explorer\Recovery!AutoRecover

HKCU\Software\Policies\Microsoft\Internet Explorer\Recovery!AutoRecover

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Enable AutoImageResize

HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!BackgroundSyncStatus

HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!BackgroundSyncStatus

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Update_Check_Page

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!UseClearType

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!UseClearType

HKLM\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation!DisableSiteListEditing

HKCU\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation!DisableSiteListEditing

HKLM\Software\Policies\Microsoft\Internet Explorer\CommandBar!ShowCompatibilityViewButton

HKCU\Software\Policies\Microsoft\Internet Explorer\CommandBar!ShowCompatibilityViewButton

HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!OpenInForeground

HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!OpenInForeground

HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!PopupsUseNewWindow

HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!PopupsUseNewWindow

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!AllowWindowReuse

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AllowWindowReuse

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!Update_Check_Interval

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Anchor Underline

HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoCrashDetection

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_CROSS_DOCUMENT_MESSAGING!iexplo

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_CROSS_DOCUMENT_MESSAGING!iexpl

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!DEPOff

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DATAURI!iexplore.exe

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DATAURI!iexplore.exe

HKLM\Software\Policies\Microsoft\Internet Explorer\IEDevTools!Disabled

HKCU\Software\Policies\Microsoft\Internet Explorer\IEDevTools!Disabled

HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpMenu

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoHelpMenu

HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableEnclosureDownload

HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableEnclosureDownload

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!SecureProtocols

HKCU\, HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!SecureProtocols

HKLM\Software\Policies\Microsoft\Internet Explorer\LinksBar!Enabled

HKCU\Software\Policies\Microsoft\Internet Explorer\LinksBar!Enabled

HKLM\Software\Policies\Microsoft\Internet Explorer\Feed Discovery!Enabled

HKCU\Software\Policies\Microsoft\Internet Explorer\Feed Discovery!Enabled





















HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Friendly http errors

HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete!Use AutoComplete

HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy!EnableInPrivateBrowsing

HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy!EnableInPrivateBrowsing

HKLM\Software\Policies\Microsoft\Internet Explorer\Safety\PrivacIE!DisableInPrivateBlocking

HKCU\Software\Policies\Microsoft\Internet Explorer\Safety\PrivacIE!DisableInPrivateBlocking

HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter!Enabled

HKCU\Software\Policies\Microsoft\Internet Explorer\PhishingFilter!Enabled

HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!RestrictPopupExceptionList

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!RestrictPopupExceptionList

HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!DisablePopupFilterLevel

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!DisablePopupFilterLevel

HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter!EnabledV8

HKCU\Software\Policies\Microsoft\Internet Explorer\PhishingFilter!EnabledV8

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Page_Transitions

HKLM\Software\Policies\Microsoft\Internet Explorer\ZOOM!ZoomDisabled

HKCU\Software\Policies\Microsoft\Internet Explorer\ZOOM!ZoomDisabled

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Display Inline Images

HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPopupManagement

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoPrinting

HKLM\Software\Policies\Microsoft\Internet Explorer\Security\P3Global!Enabled

HKCU\Software\Policies\Microsoft\Internet Explorer\Security\P3Global!Enabled

HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!QuickTabsThreshold

HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!QuickTabsThreshold

HKLM\Software\Policies\Microsoft\Internet Explorer\Recovery!NoReopenLastSession

HKCU\Software\Policies\Microsoft\Internet Explorer\Recovery!NoReopenLastSession

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!UrlEncoding

HKCU\SOFTWARE\Policies\Microsoft\Internet Explorer!SmartDithering

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!SmoothScroll

HKLM\Software\Policies\Microsoft\Internet Explorer\SearchScopes!ShowSearchSuggestionsGlobal

HKCU\Software\Policies\Microsoft\Internet Explorer\SearchScopes!ShowSearchSuggestionsGlobal

HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!Groups

HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!Enabled

HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing!Enabled

HKLM\Software\Policies\Microsoft\Internet Explorer\SearchScopes!DisplayQuickPick

HKCU\Software\Policies\Microsoft\Internet Explorer\SearchScopes!DisplayQuickPick

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete!AutoSuggest

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete!AutoSuggest

HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableFeedPane

HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!DisableFeedPane

HKLM\Software\Policies\Microsoft\Internet Explorer\Security!DisableSecuritySettingsCheck

HKCU\Software\Policies\Microsoft\Internet Explorer\Security!DisableSecuritySettingsCheck

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XDOMAINREQUEST!iexplore.exe

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XDOMAINREQUEST!iexplore.exe

HKLM\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions!DisableToolbarUpgrader

HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions!DisableToolbarUpgrader

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\WindowsSearch!EnabledScopes

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\WindowsSearch!EnabledScopes

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!AutoDetect

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap!AutoDetect

HKCU\Software\Policies\Microsoft\IEAK!NoAutomaticSignup

HKLM\Software\Policies\Microsoft\Internet Explorer\Feeds!AllowBasicAuthInClear

HKCU\Software\Policies\Microsoft\Internet Explorer\Feeds!AllowBasicAuthInClear

HKLM\Software\Policies\Microsoft\Internet Explorer\CaretBrowsing!EnableOnStartup

HKCU\Software\Policies\Microsoft\Internet Explorer\CaretBrowsing!EnableOnStartup

HKLM\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Compat_logging!iexplore.exe

HKCU\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl\Feature_Enable_Compat_logging!iexplore.exe





















HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!WarnOnIntranet

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!WarnOnIntranet

HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete!Append Completion

HKLM\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation!AllSitesCompatibilityMode

HKCU\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation!AllSitesCompatibilityMode

HKLM\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation!IntranetCompatibilityMode

HKCU\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation!IntranetCompatibilityMode

HKLM\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!AlwaysShowMenus





















HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Disable Script Debugger

HKCU\Software\Policies\Microsoft\Internet Explorer\Suggested Sites!Enabled

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!FormSuggest Passwords, HKCU\Software\Policies\Microsoft\Internet

HKCU\Software\Policies\Microsoft\Internet Explorer\Main!Error Dlg Displayed On Every Error

HKCU\Software\Policies\Microsoft\Internet Explorer\Settings!Use Anchor Hover Color

HKCU\Software\Policies\Microsoft\Internet Connection Wizard!DisableICW

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!WarnOnBadCertRecving

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!WarnOnBadCertRecving

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!DialupAutodetect

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnableHttp1_1

HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!EnableHttp1_1

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ProxyHttp1.1

HKCU\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!ProxyHttp1.1

HKLM\Software\Policies\Microsoft\Internet Explorer\CommandBar!SmallIcons

HKCU\Software\Policies\Microsoft\Internet Explorer\CommandBar!SmallIcons

HKLM\Software\Policies\Microsoft\Internet Explorer\Activities\Restrictions!UsePolicyActivitiesOnly

HKCU\Software\Policies\Microsoft\Internet Explorer\Activities\Restrictions!UsePolicyActivitiesOnly

HKLM\

HKCU\









































HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols\Mailto!UTF8Encoding

HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Protocols\Mailto!UTF8Encoding





















HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoTheaterMode

HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions!NoViewSource





























































HKLM\Software\Policies\Microsoft\Windows\HandwritingErrorReports!PreventHandwritingErrorReports

HKCU\Software\Policies\Microsoft\Windows\HandwritingErrorReports!PreventHandwritingErrorReports

HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization!RestrictImplicitTextCollection, HKLM\SOFTWARE\Policies\Microsoft\Inp

HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization!RestrictImplicitTextCollection, HKCU\SOFTWARE\Policies\Microsoft\In

HKLM\Software\Policies\Microsoft\Windows\iSCSI!NewStaticTargets

HKLM\Software\Policies\Microsoft\Windows\iSCSI!RestrictAdditionalLogins

HKLM\Software\Policies\Microsoft\Windows\iSCSI!ChangeCHAPSecret

HKLM\Software\Policies\Microsoft\Windows\iSCSI!ChangeIQNName

HKLM\Software\Policies\Microsoft\Windows\iSCSI!RequireIPSec

HKLM\Software\Policies\Microsoft\Windows\iSCSI!ConfigureTargets

HKLM\Software\Policies\Microsoft\Windows\iSCSI!ConfigureiSNSServers

HKLM\Software\Policies\Microsoft\Windows\iSCSI!ConfigureTargetPortals

HKLM\Software\Policies\Microsoft\Windows\iSCSI!RequireMutualCHAP

HKLM\Software\Policies\Microsoft\Windows\iSCSI!RequireOneWayCHAP

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\KDC\Parameters!EmitLILI

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\KDC\Parameters!UseForestSearch, HKLM\Software\Microso

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos!domain_realm_Enabled, HKLM\Software\Microsof

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos!MitRealms_Enabled, HKLM\Software\Microsoft\W

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters!KdcValidation

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters!StrictTargetContext

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters!UseForestSearch, HKLM\Software\Mic

HKLM\Software\Policies\Microsoft\Windows\LanmanServer!HashPublicationForPeerCaching

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{eb73b633-3f4e-4ba0-8f60-8f3c6f53168f}!ScenarioExecutionEnabled, HKL

HKLM\Software\Policies\Microsoft\Windows\LLTD!EnableLLTDIO, HKLM\Software\Policies\Microsoft\Windows\LLTD!AllowLLT

HKLM\Software\Policies\Microsoft\Windows\LLTD!EnableRspndr, HKLM\Software\Policies\Microsoft\Windows\LLTD!AllowRspn

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!LogonType

HKLM\Software\Policies\Microsoft\Windows\System!UseOEMBackground

HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\Winlogon!SyncForegroundPolicy

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRun

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRun

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableLocalMachineRunOnce

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableCurrentUserRunOnce

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWelcomeScreen

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideFastUserSwitching

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableStatusMessages

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableStartupSound

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!VerboseStatus

HKLM\Software\Policies\Microsoft\WindowsMediaCenter!MediaCenter

HKCU\Software\Policies\Microsoft\WindowsMediaCenter!MediaCenter

HKCU\Software\Policies\Microsoft\MMC\{C96401CF-0E17-11D3-885B-00C04F72C717}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{B708457E-DB61-4C55-A92F-0D4B5E9B1224}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{C96401D1-0E17-11D3-885B-00C04F72C717}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC!RestrictAuthorMode

HKCU\Software\Policies\Microsoft\MMC!RestrictToPermittedSnapins

HKCU\Software\Policies\Microsoft\MMC\{18BA7139-D98B-43c2-94DA-2604E34E175D}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{EBC53A38-A23F-11D0-B09B-00C04FD8DCA6}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{D967F824-9968-11D0-B936-00C04FD8D5B0}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{E355E538-1C2E-11D0-8C37-00C04FD8FE93}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{0F6B957D-509E-11D1-A7CC-0000F87571E3}!Restrict_Run, HKCU\Software\Policie

HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AE-EF3A-41C8-A911-37370C331DD4}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{0F6B957E-509E-11D1-A7CC-0000F87571E3}!Restrict_Run, HKCU\Software\Policie

HKCU\Software\Policies\Microsoft\MMC\{B6F9C8AF-EF3A-41C8-A911-37370C331DD4}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{1AA7F83C-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{1F5EEC01-1214-4D94-80C5-4BDCD2014DDD}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{A994E107-6854-4F3D-917C-E6F01670F6D3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{53D6AB1D-2488-11D1-A28C-00C04FB94F17}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{de751566-4cc6-11d1-8ca0-00c04fc297eb}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{3F276EB4-70EE-11D1-8A0F-00C04FB93753}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{C9BC92DF-5B9A-11D1-8F00-00C04FC2C17B}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{58221C67-EA27-11CF-ADCF-00AA00A80033}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{C2FE450B-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{9EC88934-C774-11d1-87F4-00C04FC2C17B}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{90087284-d6d6-11d0-8353-00a0c90640bf}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{74246bfc-4c96-11d0-abef-0020af6b0b7a}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{C2FE4502-D6C2-11D0-A37B-00C04FC9DA04}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{43668E21-2636-11D1-A1CE-0080C88593A5}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{8EAD3A12-B2C1-11d0-83AA-00A0C92C9D5D}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{677A2D94-28D9-11D1-A95B-008048918FB1}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{634BDE40-E5E1-49A1-B2CD-140FFFC830F9}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{394C052E-B830-11D0-9A86-00C04FD8DBF7}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{975797FC-4E2A-11D0-B702-00C04FD8DBF7}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{b05566ae-fe9c-4363-be05-7a4cbb7cb510}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{b05566ad-fe9c-4363-be05-7a4cbb7cb510}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{D2779945-405B-4ACE-8618-508F3E3054AC}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{753EDB4D-2E1B-11D1-9064-00A0C90AB504}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{88E729D6-BDC1-11D1-BD2A-00C04FB9603F}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{c40d66a0-e90c-46c6-aa3b-473e38c72bf2}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{FF5903A8-78D6-11D1-92F6-006097B01056}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{E12BBB5D-D59D-4E61-947A-301D25AE8C23}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{8FC0B734-A0E1-11D1-A7D3-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{D70A2BEA-A63E-11D1-A7D4-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{89cc9588-7628-4d29-8e4a-6550d0087059}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{2E19B602-48EB-11d2-83CA-00104BCA42CF}!Restrict_Run


HKCU\Software\Policies\Microsoft\MMC\{95AD72F0-44CE-11D0-AE29-00AA004B9986}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{8F8F8DC0-5713-11D1-9551-0060B0576642}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{FC715823-C5FB-11D1-9EEF-00A0C90347FF}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{d524927d-6c08-46bf-86af-391534d779d3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{A841B6C2-7577-11D0-BB1F-00A0C922E79C}!Restrict_Run


HKCU\Software\Policies\Microsoft\MMC\{57C596D0-9370-40C0-BA0D-AB491B63255D}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA0-CC85-11d0-9CE2-0080C7221EBD}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{DEA8AFA2-CC85-11d0-9CE2-0080C7221EBD}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{90810502-38F1-11D1-9345-00C04FC9DA04}!Restrict_Run



HKCU\Software\Policies\Microsoft\MMC\{5D6179C8-17EC-11D1-9AA9-00C04FD8FE93}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{6E8E0081-19CD-11D1-AD91-00AA00B8E05A}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{a1bc4ecb-66b2-44e8-9915-be02e84438ba}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{a1bc4eca-66b2-44e8-9915-be02e84438ba}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{6630f2d7-bd52-4072-bfa7-863f3d0c5da0}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{6d8880af-e518-43a8-986c-1ad21c4c976e}!Restrict_Run


HKCU\Software\Policies\Microsoft\MMC\{7478EF61-8C46-11d1-8D99-00A0C913CAD4}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{34AB8E82-C27E-11D1-A6C0-00C04FB94F17}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{FD57D297-4FD9-11D1-854E-00C04FC31FD3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{B52C1E50-1DD2-11D1-BC43-00C04FC31FD3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{5880CD5C-8EC0-11d1-9570-0060B0576642}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{B91B6008-32D2-11D2-9888-00A0C925F917}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{3D5D035E-7721-4B83-A645-6C07A3D403B7}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{3060E8CE-7020-11D2-842D-00C04FA372D4}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{243E20B0-48ED-11D2-97DA-00A024D77700}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{3CB6973D-3E6F-11D0-95DB-00A024D77700}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{6DC3804B-7212-458D-ADB0-9A07E2AE1FA2}!Restrict_Run


HKCU\Software\Policies\Microsoft\MMC\{DAB1A262-4FD7-11D1-842C-00C04FB6C218}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{1AA7F839-C7F5-11D0-A376-00C04FC9DA04}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{40B66650-4972-11D1-A7CA-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{40B66661-4972-11d1-A7CA-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{40B6664F-4972-11D1-A7CA-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{40B66660-4972-11d1-A7CA-0000F87571E3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{011BE22D-E453-11D1-945A-00C04FB984F9}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{803E14A0-B4FB-11D0-A0D0-00A0C90F574B}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{fe883157-cebd-4570-b7a2-e4fe06abe626}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{5ADF5BF6-E452-11D1-945A-00C04FB984F9}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{B1AFF7D0-0C49-11D1-BB12-00C04FC9A3A3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{18ea3f92-d6aa-41d9-a205-2023400c8fbb}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{BD95BA60-2E26-AAD1-AD99-00AA00B8E05A}!Restrict_Run




HKCU\Software\Policies\Microsoft\MMC\{03f1f940-a0f2-11d0-bb77-00aa00a1eab7}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{7AF60DD3-4979-11D1-8A6C-00C04FC33566}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{942A8E4F-A261-11D1-A760-00C04FB9603F}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{7E45546F-6D52-4D10-B702-9C2E67232E62}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{BACF5C8A-A3C7-11D1-A760-00C04FB9603F}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{1BC972D6-555C-4FF7-BE2C-C584021A0A6A}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{45ac8c63-23e2-11d1-a696-00c04fd58bc3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{0F3621F1-23C6-11D1-AD97-00AA00B88E5A}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{E26D02A0-4C1F-11D1-9AA1-00C04FC3357A}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{7d3830aa-e69e-4e17-8bd1-1b87b97099da}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{0E752416-F29E-4195-A9DD-7F0D4D5A9D71}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{b05566ac-fe9c-4368-be02-7a4cbb7cbe11}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{06993B16-A5C7-47EB-B61C-B1CB7EE600AC}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{23DC5869-BD9F-46fd-AADD-1F869BA64FC3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{2DA6AA7F-8C88-4194-A558-0D36E7FD3E64}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{5C659257-E236-11D2-8899-00104B2AFB46}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{671ee405-c969-4af9-ad1b-65e96b3b9a10}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{f78fbadd-c21a-4e0a-b53d-c879a9c8f002}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{dbfca500-8c31-11d0-aa2c-00a0c92749a3}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{f8abd46c-1297-4474-9cdf-831ebb245f49}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{f8abd46e-1297-4474-9cdf-831ebb245f49}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{C11D2F3B-E2F4-4e5b-824B-84A87AB0F666}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\{9FE24B92-C23D-451c-8045-73038D99E620}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{813C1B01-6624-4922-9C6C-03C315646584}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{f9f63d92-6225-410b-bb02-26239b8f1f59}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{317cdc35-c09e-486f-ab09-90dd2e3fdd7d}!Restrict_Run

HKCU\Software\Policies\Microsoft\MMC\FX:{317cdc37-c09e-486f-ab09-90dd2e3fdd7d}!Restrict_Run

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\MobilityCenter!NoMobilityCenter

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\MobilityCenter!NoMobilityCenter

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\PresentationSettings!NoPresentationSettings

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\PresentationSettings!NoPresentationSettings

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{C295FBBA-FD47-46ac-8BEE-B1715EC634E5}!ScenarioExecutionEnable

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{C295FBBA-FD47-46ac-8BEE-B1715EC634E5}!DownloadToolsEnabled,

HKLM\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy!DisableQueryRemoteServer

HKLM\Software\Policies\Microsoft\Windows\Installer!EnableAdminTSRemote

HKLM\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated

HKCU\Software\Policies\Microsoft\Windows\Installer!AlwaysInstallElevated

HKLM\Software\Policies\Microsoft\Windows\Installer!MaxPatchCacheSize

HKLM\Software\Policies\Microsoft\Windows\Installer!TransformsSecure

HKLM\Software\Policies\Microsoft\Windows\Installer!SafeForScripting

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableLoggingFromPackage

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableMSI

HKLM\Software\Policies\Microsoft\Windows\Installer!EnableUserControl

HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownBrowse

HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownPatch

HKLM\Software\Policies\Microsoft\Windows\Installer!AllowLockdownMedia

HKLM\Software\Policies\Microsoft\Windows\Installer!EnforceUpgradeComponentRules

HKLM\Software\Policies\Microsoft\Windows\Installer!Logging

HKCU\Software\Policies\Microsoft\Windows\Installer!DisableMedia

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableFlyweightPatching

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableLUAPatching

HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatch

HKLM\Software\Policies\Microsoft\Windows\Installer!DisablePatchUninstall

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableRollback

HKCU\Software\Policies\Microsoft\Windows\Installer!DisableRollback

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableAutomaticApplicationShutdown

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableUserInstalls

HKLM\Software\Policies\Microsoft\Windows\Installer!DisableBrowse

HKCU\Software\Policies\Microsoft\Windows\Installer!SearchOrder

HKLM\Software\Policies\Microsoft\Windows\Installer!LimitSystemRestoreCheckpointing

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{54077489-683b-4762-86c8-02cf87a33423}!ScenarioExecutionEnabled, H

HKLM\SOFTWARE\Policies\Microsoft\NetworkAccessProtection\ClientConfig\Qecs\79620!Enabled

HKLM\Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator\CorporateConnectivity!DnsProbeContent

HKLM\Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator\CorporateConnectivity!DnsProbeHost

HKLM\Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator\CorporateConnectivity!SitePrefixes

HKLM\Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator\CorporateConnectivity!WebProbeUrl

HKLM\Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator\CorporateConnectivity!DomainLocationDetermi

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowNT4Crypto

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AutoSiteCoverage

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AvoidPdcOnWan

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsAvoidRegisterRecords

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!IgnoreIncomingMailslotMessages

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AddressTypeReturned

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!UseDynamicDns

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ExpectedDialupDelay

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryQuitTime

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ForceRediscoveryInterval

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryInitialPeriod

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowSingleLabelDnsDomain

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!dbFlag

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundRetryMaximumPeriod

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!MaximumLogFileSize

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NegativeCachePeriod

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowExclusiveScriptsShareAccess

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!BackgroundSuccessfulRefreshPeriod

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NonBackgroundSuccessfulRefreshPeriod

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!LdapSrvPriority

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsRefreshInterval

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!ScavengeInterval

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!SiteName

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!NdncSiteCoverage

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!SiteCoverage

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!GcSiteCoverage

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!AllowExclusiveSysvolShareAccess

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!TryNextClosestSite

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!DnsTtl

HKLM\Software\Policies\Microsoft\Netlogon\Parameters!LdapSrvWeight

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasAllUserProperties

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DeleteAllUserConnection

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanConnect

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameAllUserRasConnection

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameLanConnection

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameConnection

HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_DoNotShowLocalOnlyIcon

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_EnableAdminProhibits

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanProperties

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_LanChangeProperties

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasChangeProperties

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AdvancedSettings

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_NewConnectionWizard

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DialupPrefs

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AddRemoveComponents

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasMyProperties

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RasConnect

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_DeleteConnection

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_ChangeBindState

HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_AllowNetBridge_NLA

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_RenameMyRasConnection

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_AllowAdvancedTCPIPConfig

HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_PersonalFirewallConfig

HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_ShowSharedAccessUI

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_Statistics

HKLM\Software\Policies\Microsoft\Windows\Network Connections!NC_StdDomainUserSetLocation

HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition!Force_Tunneling

HKCU\Software\Policies\Microsoft\Windows\Network Connections!NC_IpStateChecking

HKLM\Software\Policies\Microsoft\NetworkProjector!NetworkProjectionPortNo

HKLM\Software\Policies\Microsoft\NetworkProjector!DisableNetworkProjector

HKCU\Software\Policies\Microsoft\NetworkProjector!DisableNetworkProjector

HKLM\Software\Policies\Microsoft\Windows\NetCache!GoOfflineAction

HKCU\Software\Policies\Microsoft\Windows\NetCache!GoOfflineAction

HKLM\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders

HKCU\Software\Policies\Microsoft\Windows\NetCache\AssignedOfflineFolders

HKLM\Software\Policies\Microsoft\Windows\NetCache!Enabled

HKLM\Software\Policies\Microsoft\Windows\NetCache!PurgeAtLogoff, HKLM\Software\Policies\Microsoft\Windows\NetCache!

HKLM\Software\Policies\Microsoft\Windows\NetCache!BackgroundSyncEnabled, HKLM\Software\Policies\Microsoft\Windows\

HKLM\Software\Policies\Microsoft\Windows\NetCache!SlowLinkSpeed

HKLM\Software\Policies\Microsoft\Windows\NetCache!SlowLinkEnabled, HKLM\Software\Policies\Microsoft\Windows\NetCach

HKLM\Software\Policies\Microsoft\Windows\NetCache!DefCacheSize

HKLM\Software\Policies\Microsoft\Windows\NetCache!OnlineCachingLatencyThreshold

HKLM\Software\Policies\Microsoft\Windows\NetCache!EncryptCache

HKLM\Software\Policies\Microsoft\Windows\NetCache!EventLoggingLevel

HKCU\Software\Policies\Microsoft\Windows\NetCache!EventLoggingLevel

HKLM\Software\Policies\Microsoft\Windows\NetCache!ExcludedFileTypes

HKLM\Software\Policies\Microsoft\Windows\NetCache!ExcludeExtensions

HKLM\Software\Policies\Microsoft\Windows\NetCache!InitialBalloonTimeoutSeconds

HKCU\Software\Policies\Microsoft\Windows\NetCache!InitialBalloonTimeoutSeconds

HKLM\Software\Policies\Microsoft\Windows\NetCache!CacheQuotaLimit, HKLM\Software\Policies\Microsoft\Windows\NetCach

HKLM\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions

HKCU\Software\Policies\Microsoft\Windows\NetCache\CustomGoOfflineActions

HKLM\Software\Policies\Microsoft\Windows\NetCache!NoCacheViewer

HKCU\Software\Policies\Microsoft\Windows\NetCache!NoCacheViewer

HKLM\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList

HKCU\Software\Policies\Microsoft\Windows\NetCache\NoMakeAvailableOfflineList

HKLM\Software\Policies\Microsoft\Windows\NetCache!NoConfigCache

HKCU\Software\Policies\Microsoft\Windows\NetCache!NoConfigCache

HKLM\Software\Policies\Microsoft\Windows\NetCache!ReminderFreqMinutes

HKCU\Software\Policies\Microsoft\Windows\NetCache!ReminderFreqMinutes

HKLM\Software\Policies\Microsoft\Windows\NetCache!ReminderBalloonTimeoutSeconds

HKCU\Software\Policies\Microsoft\Windows\NetCache!ReminderBalloonTimeoutSeconds

HKLM\Software\Policies\Microsoft\Windows\NetCache!NoMakeAvailableOffline

HKCU\Software\Policies\Microsoft\Windows\NetCache!NoMakeAvailableOffline

HKLM\Software\Policies\Microsoft\Windows\NetCache!AlwaysPinSubFolders

HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogoff

HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogoff

HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogon

HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtLogon

HKLM\Software\Policies\Microsoft\Windows\NetCache!SyncAtSuspend

HKCU\Software\Policies\Microsoft\Windows\NetCache!SyncAtSuspend

HKLM\Software\Policies\Microsoft\Windows\NetCache!NoReminders

HKCU\Software\Policies\Microsoft\Windows\NetCache!NoReminders

HKLM\Software\Policies\Microsoft\Windows\NetCache!EconomicalAdminPinning

HKLM\Software\policies\Microsoft\Peernet!IgnoreDomainPasswordPolicyForNewGroups

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!SearchOnly

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!SearchOnly

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!SearchOnly

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!SeedServer, HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!SeedServer

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!SeedServer

HKLM\Software\policies\Microsoft\Peernet!Disabled

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!DisableMulticastBootstrap

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!DisableMulticastBootstrap

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!DisableMulticastBootstrap

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-Global!Disabled

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-LinkLocal!Disabled

HKLM\Software\policies\Microsoft\Peernet\Pnrp\IPv6-SiteLocal!Disabled

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\ParentalControls!WPCEnableOnDomain

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{88D69CE1-577A-4dd9-87AE-AD36D3CD9643}!ScenarioExecutionEnable

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{659F08FB-2FAB-42a7-BD4F-566CFA528769}!ScenarioExecutionEnabled

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{acfd1ca6-18b6-4ccf-9c07-580cdb6eded4}!ScenarioExecutionEnabled, HK

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{D113E4AA-2D07-41b1-8D9B-C065194A791D}!ScenarioExecutionEnabled

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{081D3213-48AA-4533-9284-D98F01BDC8E6}!ScenarioExecutionEnabled

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{affc81e2-612a-4f70-6fb2-916ff5c7e3f8}!ScenarioExecutionEnabled, HKLM

HKLM\Software\Policies\Microsoft\Windows\NetCache!PeerCachingLatencyThreshold

HKLM\SOFTWARE\Policies\Microsoft\PeerDist\CooperativeCaching!Enable

HKLM\SOFTWARE\Policies\Microsoft\PeerDist\HostedCache\Connection!Location

HKLM\SOFTWARE\Policies\Microsoft\PeerDist\CacheMgr\Republication!SizePercent

HKLM\SOFTWARE\Policies\Microsoft\PeerDist\Service!Enable

HKLM\SOFTWARE\Policies\Microsoft\PenTraining!DisablePenTraining

HKCU\SOFTWARE\Policies\Microsoft\PenTraining!DisablePenTraining

HKLM\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!UpsellEnabled

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!UpsellEnabled

HKLM\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!PerfCplEnabled

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!PerfCplEnabled

HKLM\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!SolutionsEnabled

HKCU\Software\Policies\Microsoft\Windows\Control Panel\Performance Control Panel!SolutionsEnabled

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{67144949-5132-4859-8036-a737b43825d8}!ScenarioExecutionEnabled, H

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{ffc42108-4920-4acf-a4fc-8abdcc68ada4}!ScenarioExecutionEnabled, HKL

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{a7a5847a-7511-4e4e-90b1-45ad2a002f51}!ScenarioExecutionEnabled, H

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{2698178D-FDAD-40AE-9D3C-1371703ADC5B}!ScenarioExecutionEnable

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}!ScenarioExecutionEnabled, H

HKLM\Software\Policies\Microsoft\Power\PowerSettings\A4B195F5-8225-47D8-8012-9D41369786E2!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\A4B195F5-8225-47D8-8012-9D41369786E2!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\d4c1d4c8-d5cc-43d3-b83e-fc51215cb04d!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\d4c1d4c8-d5cc-43d3-b83e-fc51215cb04d!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\abfc2519-3608-4c2a-94ea-171b0ed546ab!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\637EA02F-BBCB-4015-8E2C-A1C7B9C0B546!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\9A66D8D7-4FF7-4EF9-B5A2-5A326CA2A469!DCSettingIndex

HKLM\Software\Policies\Microsoft\Windows NT!DontPowerOffAfterShutdown

HKLM\Software\Policies\Microsoft\Power\PowerSettings\d8742dcb-3e6a-4b3c-b3fe-374623cdcf06!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\8183ba9a-e910-48da-8769-14ae6dc1170a!DCSettingIndex

HKCU\Software\Policies\Microsoft\Windows\System\Power!PromptPasswordOnResume

HKLM\Software\Policies\Microsoft\Power\PowerSettings\17aaa29b-8b43-4b94-aafe-35f64daaf1ee!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\17aaa29b-8b43-4b94-aafe-35f64daaf1ee!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\0e796bdb-100d-47d6-a2d5-f7d2daa51f51!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\F3C5027D-CD16-4930-AA6B-90DB844A8F00!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings!ActivePowerScheme

HKLM\Software\Policies\Microsoft\Power\PowerSettings\5CA83367-6E45-459F-A27B-476B1D01C936!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\5CA83367-6E45-459F-A27B-476B1D01C936!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\7648EFA3-DD9C-4E3E-B566-50F929386280!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\7648EFA3-DD9C-4E3E-B566-50F929386280!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\96996BC0-AD50-47EC-923B-6F41874DD9EB!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\96996BC0-AD50-47EC-923B-6F41874DD9EB!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\A7066653-8D6C-40A8-910E-A1F54B84C7E5!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\A7066653-8D6C-40A8-910E-A1F54B84C7E5!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings!ActivePowerScheme

HKLM\Software\Policies\Microsoft\Power\PowerSettings\f1fbfde2-a960-4165-9f88-50667911ce96!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\f1fbfde2-a960-4165-9f88-50667911ce96!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\9D7815A6-7EE4-497E-8888-515A05F02364!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\9D7815A6-7EE4-497E-8888-515A05F02364!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\29F6C1DB-86DA-48C5-9FDB-F2B67B1F44DA!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\29F6C1DB-86DA-48C5-9FDB-F2B67B1F44DA!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\7bc4a2f9-d8fc-4469-b07b-33eb785aaca0!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\90959D22-D6A1-49B9-AF93-BCE885AD335B!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\90959D22-D6A1-49B9-AF93-BCE885AD335B!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\94ac6d29-73ce-41a6-809f-6363ba21b47e!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\94ac6d29-73ce-41a6-809f-6363ba21b47e!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\bcded951-187b-4d05-bccc-f7e51960c258!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\3C0BC021-C8A8-4E07-A973-6B14CBCB2B7E!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\3C0BC021-C8A8-4E07-A973-6B14CBCB2B7E!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\6738E2C4-E8A5-4A42-B16A-E040E769756E!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\6738E2C4-E8A5-4A42-B16A-E040E769756E!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\309dce9b-bef4-4119-9921-a851fb12f0f4!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\309dce9b-bef4-4119-9921-a851fb12f0f4!ACSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\B7A27025-E569-46c2-A504-2B96CAD225A1!DCSettingIndex

HKLM\Software\Policies\Microsoft\Power\PowerSettings\B7A27025-E569-46c2-A504-2B96CAD225A1!ACSettingIndex

HKLM\Software\Policies\Microsoft\PreviousVersions!DisableLocalPage

HKCU\Software\Policies\Microsoft\PreviousVersions!DisableLocalPage

HKLM\Software\Policies\Microsoft\PreviousVersions!DisableRemotePage

HKCU\Software\Policies\Microsoft\PreviousVersions!DisableRemotePage

HKLM\Software\Policies\Microsoft\PreviousVersions!HideBackupEntries

HKCU\Software\Policies\Microsoft\PreviousVersions!HideBackupEntries

HKLM\Software\Policies\Microsoft\PreviousVersions!DisableLocalRestore

HKCU\Software\Policies\Microsoft\PreviousVersions!DisableLocalRestore

HKLM\Software\Policies\Microsoft\PreviousVersions!DisableBackupRestore

HKCU\Software\Policies\Microsoft\PreviousVersions!DisableBackupRestore

HKLM\Software\Policies\Microsoft\PreviousVersions!DisableRemoteRestore

HKCU\Software\Policies\Microsoft\PreviousVersions!DisableRemoteRestore

HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!DomainDisplayPrinters_State, HKLM\Software\Policies\Microso

HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!NonDomainDisplayPrinters_State, HKLM\Software\Policies\Mic

HKLM\Software\Policies\Microsoft\Windows NT\Printers!RegisterSpoolerRemoteRpcEndPoint

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PublishPrinters

HKLM\Software\Policies\Microsoft\Windows NT\Printers!Immortal

HKLM\Software\Policies\Microsoft\Windows NT\Printers!ForceCSREMFDespooling

HKLM\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Auto Publishing

HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Printers Page URL

HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Downlevel Browse

HKLM\Software\Policies\Microsoft\Windows NT\Printers!VerifyPublishedState

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocation

HKLM\Software\Policies\Microsoft\Windows NT\Printers!SupportLink

HKCU\Software\Policies\Microsoft\Windows NT\Printers\Wizard!Default Search Scope

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningInterval

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningPriority

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetries

HKLM\Software\Policies\Microsoft\Windows NT\Printers!KMPrintersAreBlocked

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PrintDriverIsolationExecutionPolicy

HKLM\Software\Policies\Microsoft\Windows NT\Printers!DoNotInstallCompatibleDriverFromWindowsUpdate

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruningRetryLog

HKLM\Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint!PackagePointAndPrintOnly

HKCU\Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint!PackagePointAndPrintOnly

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PrintDriverIsolationOverrideCompat

HKLM\Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint!PackagePointAndPrintServerList, HKLM\Software

HKCU\Software\Policies\Microsoft\Windows NT\Printers\PackagePointAndPrint!PackagePointAndPrintServerList, HKCU\Software

HKLM\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!Restricted, HKLM\Software\Policies\Microsoft\Windows N

HKCU\Software\Policies\Microsoft\Windows NT\Printers\PointAndPrint!Restricted, HKCU\Software\Policies\Microsoft\Windows N

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PhysicalLocationSupport

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAddPrinter

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDeletePrinter

HKLM\Software\Policies\Microsoft\Windows NT\Printers!ServerThread

HKLM\Software\Policies\Microsoft\Windows NT\Printers!PruneDownlevel

HKLM\Software\Policies\Microsoft\Windows NT\Printers!DisableWebPrinting

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoGetPrograms

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoInstalledUpdates

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoProgramsAndFeatures

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoDefaultPrograms

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoWindowsFeatures

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoWindowsMarketplace

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Programs!NoProgramsCPL

HKLM\Software\Policies\Microsoft\Windows\PswdSync!UpdateRetryInterval_state, HKLM\Software\Policies\Microsoft\Windows\

HKLM\Software\Policies\Microsoft\Windows\PswdSync!MaxRetries_state, HKLM\Software\Policies\Microsoft\Windows\PswdSy

HKLM\Software\Policies\Microsoft\Windows\PswdSync!LoggingLevel

HKLM\Software\Policies\Microsoft\Windows\PswdSync!SNISPasswordSyncEnable

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeBestEffort

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeBestEffort

HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeBestEffort

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeControlledLoad

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeControlledLoad

HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeControlledLoad

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeGuaranteed

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeGuaranteed

HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeGuaranteed

HKLM\Software\Policies\Microsoft\Windows\Psched!MaxOutstandingSends

HKLM\Software\Policies\Microsoft\Windows\Psched!NonBestEffortLimit

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeNetworkControl

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeNetworkControl

HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNetworkControl

HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeNonConforming

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingConforming!ServiceTypeQualitative

HKLM\Software\Policies\Microsoft\Windows\Psched\DiffservByteMappingNonConforming!ServiceTypeQualitative

HKLM\Software\Policies\Microsoft\Windows\Psched\UserPriorityMapping!ServiceTypeQualitative

HKLM\Software\Policies\Microsoft\Windows\Psched!TimerResolution

HKLM\SOFTWARE\Policies\Microsoft\Windows\Reliability Analysis\WMI!WMIEnable

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI\{3af8b24a-c441-4fa4-8c5c-bed591bfa867}!ScenarioExecutionEnabled, HK

HKLM\SOFTWARE\Policies\Microsoft\Windows\WinRE!DisableSetup

HKLM\Software\Policies\Microsoft\Windows NT\Reliability!SnapShot

HKLM\Software\Policies\Microsoft\Windows NT\Reliability!ShutdownReasonOn, HKLM\Software\Policies\Microsoft\Windows NT

HKLM\Software\Policies\Microsoft\Windows NT\Reliability!TimeStampEnabled, HKLM\Software\Policies\Microsoft\Windows NT\Re

HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting!IncludeShutdownErrs

HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!CreateEncryptedOnlyTickets

HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!UseCustomMessages, HKLM\Software\policies\Microsoft\Wi

HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowUnsolicited, HKLM\Software\policies\Microsoft\Windows

HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!fAllowToGetHelp, HKLM\Software\policies\Microsoft\Windows

HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!UseBandwidthOptimization, HKLM\Software\policies\Microso

HKLM\Software\policies\Microsoft\Windows NT\Terminal Services!LoggingEnabled

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices!Deny_All

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices!Deny_All

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices!AllowRemoteDASD

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Execu

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56308-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Read!Deny_Read, HKLM\Software\Polic

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Read!Deny_Read, HKCU\Software\Polic

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Write!Deny_Write, HKLM\Software\Polic

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\Custom\Deny_Write!Deny_Write, HKCU\Software\Polic

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Execu

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f56311-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Execu

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Execu

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Read

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{53f5630b-b6bf-11d0-94f2-00a0c91efb8b}!Deny_Write

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices!RebootTimeinSeconds_state, HKLM\Software\Policies

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices!RebootTimeinSeconds_state, HKCU\Software\Policie

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny_

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny_

HKLM\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny_W

HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices\{6AC27878-A6FA-4155-BA85-F98F491D4F33}!Deny_W

HKLM\Software\Policies\Microsoft\Windows NT\Rpc!IgnoreDelegationFailure

HKLM\Software\Policies\Microsoft\Windows NT\Rpc!MinimumConnectionTimeout

HKLM\Software\Policies\Microsoft\Windows NT\Rpc!ExtErrorInformation, HKLM\Software\Policies\Microsoft\Windows NT\Rpc!Ex

HKLM\Software\Policies\Microsoft\Windows NT\Rpc!RestrictRemoteClients

HKLM\Software\Policies\Microsoft\Windows NT\Rpc!EnableAuthEpResolution

HKLM\Software\Policies\Microsoft\Windows NT\Rpc!StateInformation

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!Allow-LogonScript-NetbiosDisabled

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!MaxGPOScriptWait

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLegacyLogonScripts

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogoffScripts

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunLogonScriptSync

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideLogonScripts

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideShutdownScripts

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunStartupScriptSync

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!HideStartupScripts

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunComputerPSScriptsFirst

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunUserPSScriptsFirst

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!RunUserPSScriptsFirst

HKLM\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnostics!ValidateTrust

HKLM\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnostics!EnableDiagnostics

HKLM\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy!EnableQueryRemoteServer

HKLM\SOFTWARE\Policies\Microsoft\Windows\ScheduledDiagnostics!EnabledExecution, HKLM\SOFTWARE\Policies\Microsoft

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\OCR!OCREveryPage

HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\OCR!SelectOCRLangs, HKLM\SOFTWARE\Policies\Microsoft\

HKLM\Software\Policies\Microsoft\Windows NT\Security Center!SecurityCenterInDomain

HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors!DisableLocation

HKCU\Software\Policies\Microsoft\Windows\LocationAndSensors!DisableLocation

HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors!DisableLocationScripting

HKCU\Software\Policies\Microsoft\Windows\LocationAndSensors!DisableLocationScripting

HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors!DisableSensors

HKCU\Software\Policies\Microsoft\Windows\LocationAndSensors!DisableSensors

HKLM\Software\Policies\Microsoft\Windows\Server\ServerManager!RefreshIntervalEnabled, HKLM\Software\Policies\Microsoft

HKLM\Software\Policies\Microsoft\Windows\Server\InitialConfigurationTasks!DoNotOpenAtLogon

HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\MYS!DisableShowAtLogon

HKLM\Software\Policies\Microsoft\Windows\Server\ServerManager!DoNotOpenAtLogon

HKLM\Software\Policies\Microsoft\Windows NT\Setup!SourcePath

HKLM\Software\Policies\Microsoft\Windows NT\Setup!ServicePackSourcePath

HKLM\Software\Policies\Microsoft\Windows\TabletPC!PreventHandwritingDataSharing

HKCU\Software\Policies\Microsoft\Windows\TabletPC!PreventHandwritingDataSharing

HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishDfsRoots

HKCU\Software\Policies\Microsoft\Windows NT\SharedFolders!PublishSharedFolders

HKLM\Software\Policies\Microsoft\Windows\HomeGroup!DisableHomeGroup

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInplaceSharing

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisallowRun, HKCU\Software\Microsoft\Windows\CurrentVe

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableRegistryTools

HKCU\Software\Policies\Microsoft\Windows\System!DisableCMD

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictRun, HKCU\Software\Microsoft\Windows\CurrentVer

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RestrictWelcomeCenter

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!OverrideMoreGadgetsLink

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!OverrideMoreGadgetsLink

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUnsignedGadgets

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUnsignedGadgets

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffSidebar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffSidebar

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUserInstalledGadgets

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar!TurnOffUserInstalledGadgets

HKLM\Software\Policies\Microsoft\Windows\SideShow!DeleteDataOnLogoff

HKCU\Software\Policies\Microsoft\Windows\SideShow!DeleteDataOnLogoff

HKLM\Software\Policies\Microsoft\Windows\SideShow!SetPIN, HKLM\Software\Policies\Microsoft\Windows\SideShow!PIN, HKL

HKCU\Software\Policies\Microsoft\Windows\SideShow!SetPIN, HKCU\Software\Policies\Microsoft\Windows\SideShow!PIN, HK

HKLM\Software\Policies\Microsoft\Windows\SideShow!AutoWakeDisabled

HKCU\Software\Policies\Microsoft\Windows\SideShow!AutoWakeDisabled

HKLM\Software\Policies\Microsoft\Windows\SideShow!Disabled

HKCU\Software\Policies\Microsoft\Windows\SideShow!Disabled

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowCertificatesWithNoEKU

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!EnumerateECCCerts

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowIntegratedUnblock

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowSignatureOnlyKeys

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!AllowTimeInvalidCertificates

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!X509HintsNeeded

HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp!RootCertificateCleanupOption

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!IntegratedUnblockPromptString

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!FilterDuplicateCerts

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!ForceReadingAllCertificates

HKLM\SOFTWARE\Policies\Microsoft\Windows\ScPnP!ScPnPNotification

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!DisallowPlaintextPin

HKLM\SOFTWARE\Policies\Microsoft\Windows\SmartCardCredentialProvider!ReverseSubject

HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp!CertPropEnabled

HKLM\SOFTWARE\Policies\Microsoft\Windows\CertProp!EnableRootCertificatePropagation

HKLM\SOFTWARE\Policies\Microsoft\Windows\ScPnP!EnableScPnP

HKLM\Software\Policies\Microsoft\Windows\Server for NIS!PushInterval_state, HKLM\Software\Policies\Microsoft\Windows\Serv

HKLM\Software\Policies\Microsoft\Windows\Server for NIS!LoggingLevel

HKLM\Software\Policies\SNMP\Parameters\ValidCommunities

HKLM\Software\Policies\SNMP\Parameters\PermittedManagers

HKLM\Software\Policies\SNMP\Parameters\TrapConfiguration\public

HKLM\SOFTWARE\Policies\Microsoft\SoundRecorder!Soundrec

HKCU\SOFTWARE\Policies\Microsoft\SoundRecorder!Soundrec

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!MemCheckBoxInRunDlg

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceStartMenuLogOff

HKCU\Software\Policies\Microsoft\Windows\Explorer!AddSearchInternetLinkInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ForceRunOnStartMenu

HKCU\Software\Policies\Microsoft\Windows\Explorer!PowerButtonAction

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClearRecentDocsOnExit

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClearRecentProgForNewUserInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoToolbarsOnTaskbar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsHistory

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchCommInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchFilesInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchInternetInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchProgramsInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveSearch

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoResolveTrack

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSimpleStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!GreyMSIAds

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayItemsDisplay

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LockTaskbar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetTaskbar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTaskGrouping

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoTrayContextMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMorePrograms

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoClose

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMBalloonTip

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideClock

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCommonGroups

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMConfigurePrograms

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyDocs

HKCU\Software\Policies\Microsoft\Windows\Explorer!NoStartMenuDownloads

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFavoritesMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMFUprogramsList

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMyGames

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMHelp

HKCU\Software\Policies\Microsoft\Windows\Explorer!NoStartMenuHomegroup

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWindowsUpdate

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!StartMenuLogOff

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuMyMusic

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetworkConnections

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuNetworkPlaces

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSMMyPictures

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuPinnedList

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSetFolders

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecentDocsMenu

HKCU\Software\Policies\Microsoft\Windows\Explorer!NoStartMenuRecordedTV

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRun

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSearchComputerLinkInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFind

HKCU\Software\Policies\Microsoft\Windows\Explorer!NoSearchEverywhereLinkInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuEjectPC

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoUserFolderInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoUserNameInStartMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStartMenuSubFolders

HKCU\Software\Policies\Microsoft\Windows\Explorer!NoStartMenuVideos

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!QuickLaunchEnabled

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoTrayNotify

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!Intellimenus

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoInstrumentation

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!EmailIds

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!SMTPServer

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!RecordWriteInterval

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\WSRM!AccountingEnabled

HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableConfig

HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore!DisableSR

HKLM\software\policies\microsoft\TabletTip\1.7!DisablePrediction

HKCU\software\policies\microsoft\TabletTip\1.7!DisablePrediction

HKLM\software\policies\microsoft\TabletTip\1.7!HideIPTIPTarget

HKCU\software\policies\microsoft\TabletTip\1.7!HideIPTIPTarget

HKLM\software\policies\microsoft\TabletTip\1.7!HideIPTIPTouchTarget

HKCU\software\policies\microsoft\TabletTip\1.7!HideIPTIPTouchTarget

HKLM\software\policies\microsoft\TabletTip\1.7!IncludeRareChar

HKCU\software\policies\microsoft\TabletTip\1.7!IncludeRareChar

HKLM\software\policies\microsoft\TabletTip\1.7!DisableEdgeTarget

HKCU\software\policies\microsoft\TabletTip\1.7!DisableEdgeTarget

HKLM\software\policies\microsoft\TabletTip\1.7!PRCGesture

HKCU\software\policies\microsoft\TabletTip\1.7!PRCGesture

HKLM\software\policies\microsoft\TabletTip\1.7!DisableACIntegration

HKCU\software\policies\microsoft\TabletTip\1.7!DisableACIntegration

HKLM\software\policies\microsoft\TabletTip\1.7!PasswordSecurityState, HKLM\software\policies\microsoft\TabletTip\1.7!Passwo

HKCU\software\policies\microsoft\TabletTip\1.7!PasswordSecurityState, HKCU\software\policies\microsoft\TabletTip\1.7!Passw

HKLM\software\policies\microsoft\TabletTip\1.7!ScratchOutState, HKLM\software\policies\microsoft\TabletTip\1.7!ScratchOut

HKCU\software\policies\microsoft\TabletTip\1.7!ScratchOutState, HKCU\software\policies\microsoft\TabletTip\1.7!ScratchOut

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableInkball

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableInkball

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableNoteWriterPrinting

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableNoteWriterPrinting

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableSnippingTool

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableSnippingTool

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!DisableJournal

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!DisableJournal

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonBackEscapeMapping

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonBackEscapeMapping

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicks

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicks

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicksLearningMode

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventFlicksLearningMode

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonApplicationLaunch

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonApplicationLaunch

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonPressAndHold

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!PreventButtonPressAndHold

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffButtons

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffButtons

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffPenFeedback

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffPenFeedback

HKCU\Software\Policies\Microsoft\Windows\Explorer!NoPinningToDestinations

HKCU\Software\Policies\Microsoft\Windows\Explorer!NoPinningToTaskbar

HKCU\Software\Policies\Microsoft\Windows\Explorer!NoRemoteDestinations

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarLockAll

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoAddRemoveToolbar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoRedock

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoDragToolbar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoResize

HKCU\Software\Policies\Microsoft\Windows\Explorer!TaskbarNoPinnedList

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideSCAHealth

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideSCAPower

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideSCANetwork

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!HideSCAVolume

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoNotification

HKCU\Software\Policies\Microsoft\Windows\Explorer!NoSystraySystemPromotion

HKCU\Software\Policies\Microsoft\Windows\Explorer!NoBalloonFeatureAdvertisements

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!TaskbarNoThumbnail

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Disable Advanced

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Property Pages

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Execution

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Allow Browse

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!DragAndDrop

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Creation

HKLM\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion

HKCU\Software\Policies\Microsoft\Windows\Task Scheduler5.0!Task Deletion

HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition!6to4_RouterName

HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition!6to4_RouterNameResolutionInterval

HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition!6to4_State

HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition\IPHTTPS\IPHTTPSInterface!IPHTTPS_ClientState, HKLM\Soft

HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition!ISATAP_RouterName

HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition!ISATAP_State

HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition!Teredo_ClientPort

HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition!Teredo_DefaultQualified

HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition!Teredo_RefreshRate

HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition!Teredo_ServerName

HKLM\Software\Policies\Microsoft\Windows\TCPIP\v6Transition!Teredo_State

HKLM\System\CurrentControlSet\Services\Tcpip\Parameters!EnableWsd

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowUnsignedFiles

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowUnsignedFiles

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowSignedFiles

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowSignedFiles

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCam

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableAudioCapture

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableTimeZoneRedirection

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDenyTSConnections

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPromptForPassword

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fTurnOffSingleAppMode

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableAutoReconnect

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!KeepAliveEnable, HKLM\SOFTWARE\Policies\Microsoft\Wi

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryClusterName

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryLocation

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AuthenticationLevel

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableForcibleLogoff

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCpm

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableClip

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCcm

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableCdm

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fWritableTSCCPermTab

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableLPT

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DisablePasswordSaving

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableSmartCard

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisablePNPRedir

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DeleteTempDirsOnExit

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fForceClientLptDef

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!PerSessionTempDir

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!UseProxy, HKCU\SOFTWARE\Policies\Microsoft\Windows

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fNoRemoteDesktopWallpaper

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableTerminalServerTooltip

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryActive

HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fSecureLicensing

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowedAudioQualityMode

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!ColorDepth

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!XResolution, HKLM\SOFTWARE\Policies\Microsoft\Windo

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxMonitors

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxInstanceCount

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DeleteRoamingUserProfile, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MonitoringInterval, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Service

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!VisualExperiencePolicy

HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services!fPreventLicenseUpgrade

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!PromptForCredsOnClient

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDisconnect

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNTSecurity

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEncryptRPCTraffic

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SecurityLayer

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!UserAuthentication

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fSingleSessionPerUser

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!CertTemplateName

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MinEncryptionLevel

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxCompressionLevel

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFProfilePath

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowExplicitLogonMethod, HKCU\SOFTWARE\Policies\M

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!AllowExplicitProxyName, HKCU\SOFTWARE\Policies\Mic

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFHomeDirUNC, HKLM\SOFTWARE\Policies\Microsoft\

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!Shadow

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicensingMode

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxIdleTime

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxConnectionTime

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MaxDisconnectionTime

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fPolicyFallbackPrintDriver, HKLM\SOFTWARE\Policies\Mic

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!TrustedCertThumbprints

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!TrustedCertThumbprints

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!InitialProgram, HKLM\SOFTWARE\Policies\Microsoft\Win

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fInheritInitialProgram, HKCU\SOFTWARE\Policies\Micros

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fResetBroken

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!SessionDirectoryExposeServerIP

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!WFDontAppendUserNameToProfile

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!UseUniversalPrinterDriverFirst

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!UseUniversalPrinterDriverFirst

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!LicenseServers

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fAllowDesktopCompositionOnServer

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fAllowUnlistedRemotePrograms

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fEnableTimeZoneRedirection

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fTurnOffSingleAppMode

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fDisableClip

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fNoFontSmoothing

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\TSAppSrv\VirtualIP!PromptOnIPLeaseFail

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!RedirectOnlyDefaultClientPrinter

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!RedirectOnlyDefaultClientPrinter

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!fNoRemoteDesktopWallpaper

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\TSAppSrv\VirtualIP!VIPAdapter

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!RemoteAppLogoffTimeLimit

HKCU\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!RemoteAppLogoffTimeLimit

HKLM\SOFTWARE\Policies\Microsoft\Windows\SessionManager\DFSS!EnableDFSS

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\TSAppSrv\TSMSI!Enable

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\TSAppSrv\VirtualIP!EnableVirtualIP, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\TSAppSrv\VirtualIP!VirtualMode, HKLM\SOFTWARE\Policies\Microsoft\Windo

HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!ParticipateInLoadBalancing

HKCU\Software\Policies\Microsoft\Windows\Explorer!DisableThumbsDBOnNetworkFolders

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableThumbnailsOnNetworkFolders

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableThumbnails

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffTouchInput

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffTouchInput

HKLM\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffPanning

HKCU\SOFTWARE\Policies\Microsoft\TabletPC!TurnOffPanning

HKLM\SOFTWARE\Policies\Microsoft\Tpm\BlockedCommands!Enabled, HKLM\SOFTWARE\Policies\Microsoft\Tpm\BlockedCo

HKLM\Software\Policies\Microsoft\TPM\BlockedCommands!IgnoreDefaultList

HKLM\Software\Policies\Microsoft\TPM\BlockedCommands!IgnoreLocalList

HKLM\Software\Policies\Microsoft\TPM!ActiveDirectoryBackup, HKLM\Software\Policies\Microsoft\TPM!RequireActiveDirector

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToDisk

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToDisk

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToNetwork

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToNetwork

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToOptical

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupToOptical

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupLauncher

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupLauncher

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableRestoreUI

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableRestoreUI

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupUI

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableBackupUI

HKLM\Software\Policies\Microsoft\Windows\Backup\Client!DisableSystemBackupUI

HKCU\Software\Policies\Microsoft\Windows\Backup\Client!DisableSystemBackupUI

HKLM\Software\Policies\Microsoft\Windows\System!AddAdminGroupToRUP

HKLM\Software\Policies\Microsoft\Windows\System!UploadHiveMethod, HKLM\Software\Policies\Microsoft\Windows\System!Up

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!ConnectHomeDirToRoot

HKLM\Software\Policies\Microsoft\Windows\System!DeleteRoamingCache

HKLM\Software\Policies\Microsoft\Windows\System!CleanupProfiles

HKLM\Software\Policies\Microsoft\Windows\System!CompatibleRUPSecurity

HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkDetectEnabled

HKLM\Software\Policies\Microsoft\Windows\System!DisableForceUnload

HKLM\Software\Policies\Microsoft\Windows\System!ProfileErrorAction

HKCU\Software\Policies\Microsoft\Windows\System!ExcludeProfileDirs

HKLM\Software\Policies\Microsoft\Windows\System!LeaveAppMgmtData

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!EnableProfileQuota, HKCU\Software\Microsoft\Windows\Cu

HKLM\Software\Policies\Microsoft\Windows\System!ProfileUnloadTimeout

HKCU\Software\Policies\Microsoft\Windows\System!CscSuspendDirs

HKLM\Software\Policies\Microsoft\Windows\System!LocalProfile

HKLM\Software\Policies\Microsoft\Windows\System!ReadOnlyProfile

HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkUIEnabled

HKLM\Software\Policies\Microsoft\Windows\System!WaitForNetwork

HKLM\Software\Policies\Microsoft\Windows\System!MachineProfilePath

HKLM\Software\Policies\Microsoft\Windows\System!UserProfileMinTransferRate, HKLM\Software\Policies\Microsoft\Windows\

HKLM\Software\Policies\Microsoft\Windows\System!ProfileDlgTimeOut

HKLM\Software\Policies\Microsoft\Windows\System!SlowLinkProfileDefault

HKLM\Software\Policies\Microsoft\FVE!FDVDiscoveryVolumeType, HKLM\Software\Policies\Microsoft\FVE!FDVNoBitLockerT

HKLM\Software\Policies\Microsoft\FVE!RDVDiscoveryVolumeType, HKLM\Software\Policies\Microsoft\FVE!RDVNoBitLockerT

HKLM\Software\Policies\Microsoft\FVE!UseEnhancedPin

HKLM\SOFTWARE\Policies\Microsoft\FVE!DefaultRecoveryFolderPath

HKLM\SOFTWARE\Policies\Microsoft\FVE!EncryptionMethod

HKLM\SOFTWARE\Policies\Microsoft\FVE!FDVRecovery, HKLM\SOFTWARE\Policies\Microsoft\FVE!FDVRecoveryPassword, H

HKLM\SOFTWARE\Policies\Microsoft\FVE!OSRecovery, HKLM\SOFTWARE\Policies\Microsoft\FVE!OSManageDRA, HKLM\SOFTW

HKLM\SOFTWARE\Policies\Microsoft\FVE!RDVRecovery, HKLM\SOFTWARE\Policies\Microsoft\FVE!RDVRecoveryPassword, H

HKLM\SOFTWARE\Policies\Microsoft\FVE!UseRecoveryPassword, HKLM\SOFTWARE\Policies\Microsoft\FVE!UseRecoveryDr

HKLM\Software\Policies\Microsoft\FVE!MinimumPIN

HKLM\SOFTWARE\Policies\Microsoft\FVE\PlatformValidation!Enabled, HKLM\SOFTWARE\Policies\Microsoft\FVE\PlatformValida

HKLM\Software\Policies\Microsoft\FVE!FDVPassphrase, HKLM\Software\Policies\Microsoft\FVE!FDVEnforcePassphrase, HKLM

HKLM\Software\Policies\Microsoft\FVE!RDVPassphrase, HKLM\Software\Policies\Microsoft\FVE!RDVEnforcePassphrase, HKLM

HKLM\Software\Policies\Microsoft\FVE!FDVAllowUserCert, HKLM\Software\Policies\Microsoft\FVE!FDVEnforceUserCert

HKLM\Software\Policies\Microsoft\FVE!RDVAllowUserCert, HKLM\Software\Policies\Microsoft\FVE!RDVEnforceUserCert

HKLM\Software\Policies\Microsoft\FVE!RDVConfigureBDE, HKLM\Software\Policies\Microsoft\FVE!RDVAllowBDE, HKLM\Softw

HKLM\System\CurrentControlSet\Policies\Microsoft\FVE!FDVDenyWriteAccess

HKLM\System\CurrentControlSet\Policies\Microsoft\FVE!RDVDenyWriteAccess, HKLM\Software\Policies\Microsoft\FVE!RDVD

HKLM\Software\Policies\Microsoft\FVE!MorBehavior

HKLM\Software\Policies\Microsoft\FVE!IdentificationField, HKLM\Software\Policies\Microsoft\FVE!IdentificationFieldString, HKL

HKLM\SOFTWARE\Policies\Microsoft\FVE!UseAdvancedStartup, HKLM\SOFTWARE\Policies\Microsoft\FVE!EnableBDEWith

HKLM\SOFTWARE\Policies\Microsoft\FVE!EnableNonTPM, HKLM\SOFTWARE\Policies\Microsoft\FVE!UsePartialEncryptionK

HKLM\Software\Policies\Microsoft\FVE!ActiveDirectoryBackup, HKLM\Software\Policies\Microsoft\FVE!RequireActiveDirectoryB

HKLM\Software\Policies\Microsoft\FVE!CertificateOID

HKLM\Software\Policies\Microsoft\W32time\Parameters!NtpServer, HKLM\Software\Policies\Microsoft\W32time\Parameters!Type

HKLM\Software\Policies\Microsoft\W32time\TimeProviders\NtpClient!Enabled

HKLM\Software\Policies\Microsoft\W32Time\TimeProviders\NtpServer!Enabled

HKLM\Software\Policies\Microsoft\W32Time\Config!FrequencyCorrectRate, HKLM\Software\Policies\Microsoft\W32Time\Config!

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!ScenarioExecutionEnabled, HKLM\SOFTWARE\Policies\Microsoft\Window

HKLM\SOFTWARE\Policies\Microsoft\Windows\WDI!DataRetentionBySizeEnabled, HKLM\SOFTWARE\Policies\Microsoft\Windo

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Windows!TurnOffWinCal

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Windows!TurnOffWinCal

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\WAU!Disabled

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\WAU!Disabled

HKLM\Software\Policies\Microsoft\Windows\Backup\Server!OnlySystemBackup

HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoBackupToDisk

HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoBackupToNetwork

HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoBackupToOptical

HKLM\Software\Policies\Microsoft\Windows\Backup\Server!NoRunNowBackup

HKLM\Software\Policies\Microsoft\Windows\WindowsColorSystem!ProhibitInstallUninstall

HKCU\Software\Policies\Microsoft\Windows\WindowsColorSystem!ProhibitInstallUninstall

HKLM\Software\Policies\Microsoft\Windows\WCN\Registrars!EnableRegistrars, HKLM\Software\Policies\Microsoft\Windows\W

HKLM\Software\Policies\Microsoft\Windows\WCN\UI!DisableWcnUi

HKCU\Software\Policies\Microsoft\Windows\WCN\UI!DisableWcnUi

HKLM\Software\Policies\Microsoft\Windows Defender\Scan!CheckForSignaturesBeforeRunningScan

HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet!SpyNetReporting, HKLM\Software\Policies\Microsoft\Windows D

HKLM\Software\Policies\Microsoft\Windows Defender\Real-time Protection!DisableRealtimeMonitoring

HKLM\Software\Policies\Microsoft\Windows Defender!DisableRoutinelyTakingAction

HKLM\Software\Policies\Microsoft\Windows Defender!DisableAntiSpyware

HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates!CheckAlternateHttpLocation

HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates!CheckAlternateDownloadLocation

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!EnforceShellExtensionSecurity

HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!180E





HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!180E





HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!180E





HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!180E





HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!180F





HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!180F





HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0!180F





HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0!180F





HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableBindDirectlyToPropertySetStorage

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!DisableBindDirectlyToPropertySetStorage

HKCU\Software\Policies\Microsoft\Windows\Explorer!DisableKnownFolders, HKCU\Software\Policies\Microsoft\Windows\Explo

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ConfirmFileDelete

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRecycleFiles

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoRunasInstallPrompt

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!LinkResolveIgnoreLinkInfo

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32!NoBackButton

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32!NoPlacesBar

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Comdlg32!NoFileMru

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDrives

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoManageMyComputerVerb

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\comdlg32\Placesbar!Place0, HKCU\Software\Microsoft\Windows\Cur

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!RecycleBinSize

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!MaxRecentDocs

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoComputersNearMe

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Network!NoEntireNetwork

HKCU\Software\Policies\Microsoft\Windows\Explorer!TryHarderPinnedOpenSearch, HKCU\Software\Policies\Microsoft\Windows

HKCU\Software\Policies\Microsoft\Windows\Explorer!TryHarderPinnedLibrary, HKCU\Software\Policies\Microsoft\Windows\Explor

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewOnDrive

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoNetConnectDisconnect

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoCDBurning

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDFSTab

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFileMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoHardwareTab

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoShellSearchButton

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSecurityTab

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoSharedDocuments

HKCU\Software\Policies\Microsoft\Windows\Explorer!NoSearchInternetTryHarderButton

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeKeyboardNavigationIndicators

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoChangeAnimation

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoViewContextMenu

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoFolderOptions

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PromptRunasInstallNetPath

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoThumbnailCache

HKCU\Software\Policies\Microsoft\Windows\Explorer!DisableSearchBoxSuggestions

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStrCmpLogical

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoStrCmpLogical

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!PreXPSP2ShellProtocolBehavior

HKCU\Software\Policies\Microsoft\Windows\Explorer!HideContentViewModeSnippets

HKCU\Software\Policies\Microsoft\Windows\Explorer!DisableIndexedLibraryExperience

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoWinKeys

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!ClassicShell

HKLM\Software\Policies\Microsoft\Windows\Explorer!CheckSameSourceAndTargetForFRAndDFS

HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcShowProgress

HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcQuota

HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SfcScan

HKLM\Software\Policies\Microsoft\Windows NT\Windows File Protection!SFCDllCacheDir

HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\ICFv4!BypassFirewall

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings!AllowOutboundDestinationUnreachable, H

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\IcmpSettings!AllowOutboundDestinationUnreachable,

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Policie

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\FileAndPrint!Enabled, HKLM\SOFTWARE\Polici

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Polici

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\RemoteAdminSettings!Enabled, HKLM\SOFTWARE\Polic

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Pol

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\RemoteDesktop!Enabled, HKLM\SOFTWARE\Po

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\Po

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Services\UPnPFramework!Enabled, HKLM\SOFTWARE\P

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!AllowUserPrefMerge

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!AllowUserPrefMerge

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!AllowUserPrefMerge

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!AllowUserPrefMerge

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\M

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\Logging!LogDroppedPackets, HKLM\SOFTWARE\Policies\

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts!Enabled, HKLM\SOFTWARE\Policies\Mi

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\GloballyOpenPorts!Enabled, HKLM\SOFTWARE\Policies\M

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications!Enabled, HKLM\SOFTWARE\Policies

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile\AuthorizedApplications!Enabled, HKLM\SOFTWARE\Policie

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DoNotAllowExceptions

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DoNotAllowExceptions

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DisableNotifications

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DisableNotifications

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!DisableUnicastResponsesToMulticastBroadcast

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!DisableUnicastResponsesToMulticastBroadcast

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile!EnableFirewall

HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile!EnableFirewall

HKLM\SOFTWARE\Policies\Microsoft\Windows Mail!DisableCommunities

HKCU\SOFTWARE\Policies\Microsoft\Windows Mail!DisableCommunities

HKLM\SOFTWARE\Policies\Microsoft\Windows Mail!ManualLaunchAllowed

HKCU\SOFTWARE\Policies\Microsoft\Windows Mail!ManualLaunchAllowed

HKLM\Software\Policies\Microsoft\WMDRM!DisableOnline

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!EnableScreenSaver

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\HTTP!ProxyPolicy, HKCU\Software\Policies\Microsoft\Win

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\MMS!ProxyPolicy, HKCU\Software\Policies\Microsoft\Wind

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!NetworkBufferingPolicy, HKCU\Software\Policies\Microsoft\WindowsMe

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols\RTSP!ProxyPolicy, HKCU\Software\Policies\Microsoft\Win

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!DoNotShowAnchor

HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!GroupPrivacyAcceptance

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideNetworkTab

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HidePrivacyTab

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!HideSecurityTab

HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DisableAutoUpdate

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCDDVDMetadataRetrieval

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventCodecDownload

HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DesktopShortcut

HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!PreventLibrarySharing

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventMusicFileMetadataRetrieval

HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!QuickLaunchShortcut

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!PreventRadioPresetsRetrieval

HKLM\Software\Policies\Microsoft\WindowsMediaPlayer!DontUseFrameInterpolation

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer!SetAndLockSkin, HKCU\Software\Policies\Microsoft\WindowsMediaPla

HKCU\Software\Policies\Microsoft\WindowsMediaPlayer\Protocols!WindowsMediaStreamingProtocols, HKCU\Software\Policies\

HKLM\Software\Policies\Microsoft\Messenger\Client!PreventRun

HKCU\Software\Policies\Microsoft\Messenger\Client!PreventRun

HKLM\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun

HKCU\Software\Policies\Microsoft\Messenger\Client!PreventAutoRun

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowAutoConfig, HKLM\Software\Policies\Microsoft\Windows\WinRM

HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowBasic

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowBasic

HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowCredSSP

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowCredSSP

HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowUnencryptedTraffic

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowUnencryptedTraffic

HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowDigest

HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowKerberos

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowKerberos

HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!AllowNegotiate

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!AllowNegotiate

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!CBTHardeningLevelStatus, HKLM\Software\Policies\Microsoft\Wi

HKLM\Software\Policies\Microsoft\Windows\WinRM\Client!TrustedHosts, HKLM\Software\Policies\Microsoft\Windows\WinRM\Cli

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!HttpCompatibilityListener

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service!HttpsCompatibilityListener

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!AllowRemoteShellAccess

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxConcurrentUsers

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!IdleTimeout, HKLM\

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxMemoryPerShellMB

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxProcessesPerShell

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!MaxShellsPerUser

HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS!ShellTimeOut

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AutoInstallMinorUpdates

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!ElevateNonAdmins

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!AcceptTrustedPublisherCerts

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!DetectionFrequencyEnabled, HKLM\Software\Policies\Micros

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoUpdate, HKLM\Software\Policies\Microsoft\Windows\W

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootWarningTimeoutEnabled, HKLM\Software\Policies\Mi

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption

HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUAsDefaultShutdownOption

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption

HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAUShutdownOption

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate!TargetGroupEnabled, HKLM\Software\Policies\Microsoft\Window

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!AUPowerManagement

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!NoAutoRebootWithLoggedOnUsers

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\WindowsUpdate!DisableWindowsUpdateAccess, HKCU\Software\M

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RebootRelaunchTimeoutEnabled, HKLM\Software\Policies\M

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!RescheduleWaitTimeEnabled, HKLM\Software\Policies\Micr

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!UseWUServer

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!IncludeRecommendedUpdates

HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU!EnableFeaturedSoftware

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoAutoUpdate

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!ShutdownSessionTimeout

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisableShutdownNamedPipe

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!Shell

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!SoftwareSASGeneration

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!DisplayLastLogonInfo

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!DontDisplayLogonHoursWarnings

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System!ReportControllerMissing

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!ReportControllerMissing

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System!LogonHoursAction

HKLM\Software\Policies\Microsoft\Windows\System!AllowBlockingAppsAtShutdown

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\SearchExtensions!InternetExtensionName, HKCU\Software\

Supported On

At least Windows Vista


Windows Server 2003, Windows XP, and Windows 2000 operating systems only












At least Windows Server 2003

At least Windows XP Professional with SP1 or Windows Server 2003 family



At least Windows 7 or Windows Server 2008 R2






At least Windows XP Professional with SP2












At least Windows 2000









Windows 7 or computers with BITS 3.5 installed.






Windows XP SP2 or Windows Server 2003 SP1, or computers with BITS 2.0 installed.








Windows XP or Windows Server 2003, or computers with BITS 1.5 installed.






at least Windows NetMeeting v3.0


































At least Windows XP Professional or Windows Server 2003 family





At least Windows 2000 Service Pack 1






Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP








































Windows 2000 only



















Windows Server 2003 and Windows XP operating systems only
























Windows Server 2008, Windows Vista, Windows Server 2003, and Windows XP SP2







Windows Server 2008 with Desktop Experience installed or Windows Vista

Windows Server 2008 with Desktop Experience installed or Windows Vista













Windows XP Professional only




































Windows Server 2003 and Windows XP only



































































At least Microsoft Windows Server 2008

At least Internet Explorer 6 Service Pack 1












At least Windows 2000 Service Pack 3, Windows XP Professional Service Pack 1 or Windows Server 2003 family

At least Windows XP Professional with SP2 or Windows Server 2003 family with SP1

























Windows Server 2003 only

At least Internet Explorer 6.0 in Windows XP Service Pack 2 or Windows Server 2003 Service Pack 1




















At least Internet Explorer 7.0














































Only Internet Explorer 6.0 in Windows 2003 Service Pack 1




































































At least Internet Explorer 6.0 in Windows 2003 Service Pack 1









































































































At least Internet Explorer 6.0 in Windows 2003 Service Pack 1. Not supported on Windows Vista

At least Internet Explorer 6.0 in Windows 2003 Service Pack 1. Not supported on Windows Vista








Only Internet Explorer 6.0




Only Internet Explorer 5.0 and Internet Explorer 6.0












































At least Internet Explorer 5.0. Not supported on Windows Vista






























































Only Internet Explorer 5.0 through Internet Explorer 7.0

Only Internet Explorer 5.0 through Internet Explorer 7.0


























































At least Internet Explorer 7.0 in Windows Vista















Windows 2000 only

Windows 2000 only


























































At least Microsoft Windows Server 2003 R2





















Windows Installer v3.0



















Microsoft Windows XP or Windows 2000 with Windows Installer v2.0














































Microsoft Windows Server 2003, Windows XP, and Windows 2000 Service Pack 1 operating systems only






















Microsoft Windows XP Professional with SP2 and Windows Server 2003 family only















At least Windows 2000 Service Pack 5, Windows XP Professional Service Pack 2 or Windows Server 2003 family Service Pack


























































Windows Vista only

Windows Vista only




































Windows Vista only

Windows Vista only
























































Windows Vista and Windows Server 2008





Supported Windows XP SP1 through Windows Server 2008 RTM






Windows 2000 only








































Microsoft Windows 7 or later

Microsoft Windows 7 or later
























Windows Vista only




























At least Windows Vista Service Pack 1













Windows Server 2008, Windows Vista, Windows Server 2003, Windows XP, and Windows 2000


























At least Windows 2000 Service Pack 3 or Windows XP Professional Service Pack 1




















Windows Vista only








Windows Vista only


























Windows Vista only

Windows Vista only

Windows Vista only

Windows Vista only





































Windows Vista only


























At least Windows Vista Service Pack 1

At least Microsoft Windows Vista with Service Pack 1





TS_SUPPORTED_LONGHORN




At least Microsoft Windows Server 2003 with SP1



At least Microsoft Windows Server 2003, Enterprise Edition



At least Microsoft Windows XP and Windows Server 2003 only
























HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!DeleteRoamingUserProfile, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!MonitoringInterval, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Service




At least Microsoft Windows 2000 Terminal Services

At least Microsoft Windows 2000 Terminal Services





















Microsoft Windows Server 2003 with Service Pack 1 only








At least Microsoft Windows Server 2003 with Service Pack 2

At least Windows Server 2008 or Windows 7

At least Windows Server 2008 or Windows 7











HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\TSAppSrv\VirtualIP!EnableVirtualIP, HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services\TSAppSrv\VirtualIP!VirtualMode, HKLM\SOFTWARE\Policies\Microsoft\Windo


Windows Vista Service Pack 1

















Windows Vista only

Windows Vista only












At least Windows 2000 Service Pack 4, Windows XP Professional Service Pack 1 or Windows Server 2003 family

















Windows 7 family

Windows 7 family




Windows 7 family

Windows 7 family

Windows 7 family


Windows 7 family


Windows 7 family

Windows 7 family

Windows 7 family

Windows 7 family

Windows 7 family

Windows 7 family

Windows 7 family


Windows 7 family

Windows 7 family



Windows 7 family







Windows Vista only

Windows Vista only




















































































Windows Media Player 9 Series and later.

Windows Media Player for Windows XP and later.













Windows Media Player 11 for Windows XP or Windows Media Player 11 for Windows Vista or later.






















Help Text

This policy setting controls the installation of ActiveX controls for sites in Trusted zone. If this setting is enabled ActiveX controls

The ActiveX Installer Service is the solution to delegate the install of per-machine ActiveX controls to a Standard User in the ent

Prevents users from using Add or Remove Programs to configure installed services.\n\n\nThis setting removes the "Set up serv

Removes the Add New Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the attached

Removes the Add/Remove Windows Components button from the Add or Remove Programs bar. As a result, users cannot view or ch

Removes the Change or Remove Programs button from the Add or Remove Programs bar. As a result, users cannot view or change the

Removes the "Add a program from CD-ROM or floppy disk" section from the Add New Programs page. This prevents users from using

Removes the "Add programs from Microsoft" section from the Add New Programs page. This setting prevents users from using Add o

Prevents users from viewing or installing published programs.\n\n\nThis setting removes the "Add programs from your network" sec

Removes the Set Program Access and Defaults button from the Add or Remove Programs bar. As a result, users cannot view or cha

Prevents users from using Add or Remove Programs.\n\n\nThis setting removes Add or Remove Programs from Control Panel and rem

Removes links to the Support Info dialog box from programs on the Change or Remove Programs page.\n\n\nPrograms listed on the Ch

Specifies the category of programs that appears when users open the "Add New Programs" page.\n\n\nIf you enable this setting,

This policy setting prevents a Federation Service in Active Directory Federation Services (AD FS) from being installed or run.\n\n\

Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running on this computer. This setting affects the launching

Specifies whether to prevent the MS-DOS subsystem (ntvdm.exe) from running for all users. This setting affects the launching of

This policy controls the visibility of the Program Compatibility property page shell extension. This shell extension is visible on

This policy controls the state of the application compatibility engine in the system.\n\n\nThe engine is part of the loader and loo

The policy controls the state of the Application Telemetry engine in the system.\n\n\nApplication Telemetry is a mechanism that t

This policy controls the state of the Problem Steps Recorder feature in the system.\n\n\nProblem Steps Recorder enables capturi

This policy controls the state of the Program Compatibility Assistant in the system.\n \nThe PCA monitors user initiated pro

This policy controls the state of the Program Compatibility Assistant in the system.\n \nThe PCA monitors user initiated pro

This policy controls the state of the Program Inventory collector in the system.\n \nThe PDU inventories programs and files on t

The policy controls the state of the Switchback compatibility engine in the system. \n\n\nSwitchback is a mechanism that provides g

This policy setting allows you to manage the default risk level for file types. To fully customize the risk level for file attachments

This policy setting allows you to manage whether Windows marks file attachments with information about their zone of origin (i.e.

This policy setting allows you to manage whether users can manually remove the zone information from saved file attachments by

This policy setting allows you to configure the list of high risk file types. If the file attachment is in the list of high risk file ty

This policy setting allows you to configure the list of low risk file types. If the attachment is in the list of low risk file types, W

This policy setting allows you to configure the list of moderate risk file types. If the attachment is in the list of moderate risk fil

This policy setting allows you to manage the behavior for notifying registered antivirus programs. If multiple programs are regist

This policy setting allows you to configure the logic that Windows uses to determine the risk for file attachments.\n\n\nPreferring

Sets the default behavior for Autorun commands.\n\n\nAutorun commands are generally stored in autorun.inf files. They often la

Sets the default behavior for Autorun commands.\n\n\nAutorun commands are generally stored in autorun.inf files. They often la

If this policy is enabled, the "Always do this..." checkbox in Autoplay dialog will not be set by default when the dialog is shown.

If this policy is enabled, the "Always do this..." checkbox in Autoplay dialog will not be set by default when the dialog is shown.

Turns off the Autoplay feature.\n\n\nAutoplay begins reading from a drive as soon as you insert media in the drive. As a result,

Turns off the Autoplay feature.\n\n\nAutoplay begins reading from a drive as soon as you insert media in the drive. As a result,

If this policy is enabled, autoplay will not be enabled for non-volume devices like MTP devices. If you disable or not configure th

If this policy is enabled, autoplay will not be enabled for non-volume devices like MTP devices. If you disable or not configure th

This policy setting determines whether domain users can log on or elevate User Account Control (UAC) permissions using biometric

If you enable (or do not configure) this policy setting, the Windows Biometric Service will be available, and users will be able to

This policy setting determines whether users can log on or elevate User Account Control (UAC) permissions using biometrics. By d

This policy setting specifies the number of seconds a pending fast-user switch event will remain active before the switch is initia

This policy setting determines if the Background Intelligent Transfer Service (BITS) Peercaching feature is enabled on a specific c

This setting affects whether the BITS client is allowed to use Windows Branch Cache. If the Windows Branch Cache component is i

This setting specifies whether the computer will act as a BITS peercaching client. By default, when BITS peercaching is enabled, th

This setting specifies whether the computer will act as a BITS peercaching server. By default, when BITS peercaching is enabled, th

This policy setting limits the maximum age of files in the Background Intelligent Transfer Service (BITS) Peercache. In order to ma

This policy setting limits the maximum amount of disk space that can be used for the BITS Peercache, as a percentage of the total s

This policy setting limits the amount of time that Background Intelligent Transfer Service (BITS) will take to download the files

This policy setting limits the network bandwidth that Background Intelligent Transfer Service (BITS) uses for background transfers.

This setting limits the network bandwidth that BITS uses for peercache transfers (this setting does not affect transfers from th

This policy setting limits the number of BITS jobs that can be created by a user. By default, BITS limits the total number of jobs

This policy setting limits the number of BITS jobs that can be created for all users of the computer. By default, BITS limits the t

This policy setting limits the number of files that a BITS job can contain. By default, a BITS job is limited to 200 files. You can u

This policy setting limits the number of ranges that can be added to a file in a BITS job. By default, files in a BITS job are limited

This policy setting limits the network bandwidth that Background Intelligent Transfer Service (BITS) uses for background transfers

This policy setting limits the network bandwidth that Background Intelligent Transfer Service (BITS) uses for background transfer

This setting specifies the number of days a pending BITS job can remain inactive before the job is considered abandoned. By defaul

If you enable this setting all Customer Experience Improvement Program uploads are redirected to Microsoft Operations Manager se

This policy setting will enable tagging of Windows Customer Experience Improvement data when a study is being conducted.\n\n\nIf

Determines the cipher suites used by the Secure Socket Layer (SSL).\n\n\nIf this setting is enabled, SSL ci

Directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires.\n\n\n

Directs the system to search Active Directory for missing Component Object Model (COM) components that a program requires.\n\n\n

Make the automatic acceptance of incoming calls persistent.

Disables the application sharing feature of NetMeeting completely. Users will not be able to host or view shared applications.

Disables the audio feature of NetMeeting. Users will not be able to send or receive audio.

Disables the Chat feature of NetMeeting.

Disables the directory feature of NetMeeting.\n\n\nUsers will not logon to a directory (ILS) server when NetMeeting starts. Users

Disables full duplex mode audio. Users will not be able to listen to incoming audio while speaking into the microphone. Older

Disables the 2.x whiteboard feature of NetMeeting.\n\n\nThe 2.x whiteboard is available for compatibility with older versions of

Disables the remote desktop sharing feature of NetMeeting. Users will not be able to set it up or use it for controlling their comp

Disables the Advanced Calling button on the General Options page. Users will not then be able to change the call placement m

Disables the T.126 whiteboard feature of NetMeeting.

Configures NetMeeting to download settings for users each time it starts.\n\n\nThe settings are downloaded from the URL listed

Hides the Audio page of the Tools Options dialog. Users will not then be able to change audio settings.

Hides the General page of the Tools Options dialog. Users will not then be able to change personal identification and bandwidth

Hides the Security page of the Tools Options dialog. Users will not then be able to change call security and authentication settin

Hides the Video page of the Tools Options dialog. Users will not then be able to change video settings.

Limits the bandwidth audio and video will consume when in a conference. This setting will guide NetMeeting to choose the right

Limits the size of files users can send to others in a conference.

Prevents users from adding directory (ILS) servers to the list of those they can use for placing calls.

Prevents users from sharing applications in true color. True color sharing uses more bandwidth in a conference.

Prevents users from turning on automatic acceptance of incoming calls.\n\n\nThis ensures that others cannot call and connect

Prevents users from changing the way calls are placed, either directly or via a gatekeeper server.

Prevents user from changing the DirectSound audio setting. DirectSound provides much better audio quality, but older audio ha

Prevents users from allowing others in a conference to control what they have shared. This enforces a read-only mode; the other

Prevents users from sharing the whole desktop. They will still be able to share individual applications.

Prevents users from receiving files from others in a conference.

Prevents users from receiving video. Users will still be able to send video provided they have the hardware."

Prevents users from sending files to others in a conference.

Prevents users from sending video if they have the hardware. Users will still be able to receive video from others.

Prevents users from sharing anything themselves. They will still be able to view shared applications/desktops from others.

Prevents users from sharing command prompts. This prevents users from inadvertently sharing out applications, since command

Prevents users from sharing Explorer windows. This prevents users from inadvertently sharing out applications, since Explorer

Prevents users from viewing directories as Web pages in a browser.

Sets the level of security for both outgoing and incoming NetMeeting calls.

Sets the URL NetMeeting will display when the user chooses the Help Online Support command.

Set All Control Panel Items as the default Control Panel view.\n\n\nIf the policy is disabled, Control Panel Home is the default vi

Hides specified Control Panel items.\n\n\nThis setting removes Control Panel items (such as "Mouse", "System" or "Personalizati

Disables all Control Panel programs.\n\n\nThis setting prevents Control.exe, the program file for Control Panel, from starting. A

Hides all Control Panel items and folders except those specified in this setting.\n\n\nThis setting removes all Control Panel it

Disables the Display Control Panel.\n\n\nIf you enable this setting, the Display Control Panel does not run. When users try to

Enables desktop screen savers.\n\n\nIf you disable this setting, screen savers do not run. Also, this setting disables the Screen

This setting allows you to force a specific visual style file by entering the path (location) of the visual style file.\n\n\nThis ca

Specifies the screen saver for the user's desktop.\n\n\nIf you enable this setting, the system displays the specified screen saver o

Removes the Settings tab from Display in Control Panel.\n\n\nThis setting prevents users from using Control Panel to add, confi

Specifies which theme file is applied to the computer the first time a user logs on.\n\n\nIf you enable this setting, the theme that

Determines whether screen savers used on the computer are password protected.\n\n\nIf you enable this setting, all screen saver

This setting forces the theme color scheme to be the default color scheme.\n\n\nIf you enable this setting, a user cannot chang

Prevents users from adding or changing the background design of the desktop.\n\n\nBy default, users can use the Desktop Backgr

Prevents users from changing the desktop icons.\n\n\nBy default, users can use the Desktop Icon Settings dialog in the Personali

Prevents users from changing the mouse pointers.\n\n\nBy default, users can use the Pointers tab in the Mouse Control Panel to

Prevents the Screen Saver dialog from opening in the Personalization or Display Control Panel.\n \nThis setting prevents us

Prevents users from changing the sound scheme.\n\n\nBy default, users can use the Sounds tab in the Sound Control Panel to

This setting disables the theme gallery in the Personalization Control Panel.\n\n\nIf you enable this setting, users cannot change

Prevents users or applications from changing the visual style of the windows and buttons displayed on their screens.\n\n\nWhen

Disables the Window Color page in the Personalization Control Panel, or the Color Scheme dialog in the Display Control Panel on

Prevents users from changing the size of the font in the windows and buttons displayed on their screens.\n\n\nIf this setting is en

Specifies how much user idle time must elapse before the screen saver is launched.\n\n\nWhen configured, this idle time can be set

This policy setting allows an administrator to standardize the logon pictures for all users on a system to the default user pictu

This policy setting specifies a default logon domain which may be a different domain than the machine joined domain. Without this

This policy setting allows the administrator to exclude the specified\ncredential providers from use during authentication.\n\n\nNo

This policy setting applies to applications using the Cred SSP component (for example: Terminal Server).\n\n\nThis policy appl

This policy setting applies to applications using the Cred SSP component (for example: Terminal Server).\n\n\nThis policy app

This policy setting applies to applications using the Cred SSP component (for example: Terminal Server).\n\n\nThis policy appl




This policy setting applies to applications using the Cred SSP component (for example: Terminal Server).\n\n\nIf you enable th

This policy setting applies to applications using the Cred SSP component (for example: Terminal Server).\n\n\nIf you enable th

This policy setting applies to applications using the Cred SSP component (for example: Terminal Server).\n\n\nIf you enable t

By default administrator accounts are not displayed when attempting to elevate a running application. \n\n\nIf you enable this pol

This policy setting requires the user to enter Microsoft Windows credentials using a trusted path, to prevent a Trojan horse or o

Prevents users from changing their Windows password on demand.\n\n\nThis setting disables the "Change Password" button on t

Prevents users from locking the system.\n\n\nWhile locked, the desktop is hidden and the system cannot be used. Only the user w

This setting disables or removes all menu items and buttons that log the user off the system.\n\n\nAlso, see the "Remove Logoff

Prevents users from starting Task Manager (Taskmgr.exe).\n\n\nIf this setting is enabled and users try to start Task Manager, a

Allows you to specify that local computer administrators can supplement the "Define Activation Security Check exemptions" list.\n\n

Allows you to view and change a list of DCOM server application ids (appids) which are exempted from the DCOM Activation security

Adds and deletes specified Web content items.\n\n\nYou can use the "Add" box in this setting to add particular Web-based items or

Permits only bitmap images for wallpaper. This setting limits the desktop background ("wallpaper") to bitmap (.bmp) files. If u

Specifies the desktop background ("wallpaper") displayed on all users' desktops.\n\n\nThis setting lets you specify the wallpaper

Disables Active Desktop and prevents users from enabling it.\n\n\nThis setting prevents users from trying to enable or disable Act

Removes Active Desktop content and prevents users from adding Active Desktop content. \n\n\nThis setting removes all Active Des

Remote shared folders are not added to Network Locations whenever you open a document in the shared folder.\n\n\nIf you disable

Prevents users from saving certain changes to the desktop.\n\n\nIf you enable this setting, users can change the desktop, but s

Enables Active Desktop and prevents users from disabling it.\n\n\nThis setting prevents users from trying to enable or disable Act

Displays the filter bar above the results of an Active Directory search. The filter bar consists of buttons for applying additional fi

Hides the Active Directory folder in Network Locations.\n\n\nThe Active Directory folder displays Active Directory objects in a bro

Removes icons, shortcuts, and other default and user-defined items from the desktop, including Briefcase, Recycle Bin, Compu

Removes the Internet Explorer icon from the desktop and from the Quick Launch bar on the taskbar.\n\n\nThis setting does not pr

Removes the Network Locations icon from the desktop.\n\n\nThis setting only affects the desktop icon. It does not prevent users

Specifies the maximum number of objects the system displays in response to a command to browse or search Active Directory. This

Prevents users from manipulating desktop toolbars.\n\n\nIf you enable this setting, users cannot add or remove toolbars from the d

Prevents users from adding Web content to their Active Desktop.\n\n\nThis setting removes the "New" button from Web tab in Displ

Prevents users from adjusting the length of desktop toolbars. Also, users cannot reposition items or toolbars on docked toolbars.\

Prevents the user from enabling or disabling Active Desktop or changing the Active Desktop configuration.\n\n\nThis is a compreh

Prevents users from removing Web content from their Active Desktop.\n\n\nIn Active Desktop, you can add items to the desktop bu

Prevents users from deleting Web content from their Active Desktop.\n\n\nThis setting removes the Delete button from the Web tab

Prevents users from changing the properties of Web content items on their Active Desktop.\n\n\nThis setting disables the Propert

Prevents users from changing the path to their profile folders.\n\n\nBy default, a user can change the location of their individual p

This setting hides Computer from the desktop and from the new Start menu. It also hides links to Computer in the Web view of all E

Removes most occurrences of the My Documents icon.\n\n\nThis setting removes the My Documents icon from the desktop, from W

This setting hides Properties on the context menu for Computer.\n\n\nIf you enable this setting, the Properties option will not be

This policy setting hides the Properties menu command on the shortcut menu for the My Documents icon.\n\n\nIf you enable this

Removes the Properties option from the Recycle Bin context menu.\n\n\nIf you enable this setting, the Properties option will not b

Removes most occurrences of the Recycle Bin icon.\n\n\nThis setting removes the Recycle Bin icon from the desktop, from Window

Prevents users from using the Desktop Cleanup Wizard.\n\n\nIf you enable this setting, the Desktop Cleanup wizard does not auto

Prevents windows from being minimized or restored when the active window is shaken back and forth with the mouse.\n \nIf you

This policy setting allows you to determine whether members of the Administrators group can install and update the drivers for any

This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for devices that Windows is allowe

This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device drivers that Wi

Specifies a list of device setup class GUIDs describing device drivers that non-administrator members of the built-in Users group

This policy setting allows you to allow or deny remote access to the Plug and Play interface. \n \nIf you enable this policy settin

Determines how the system responds when a user tries to install device driver files that are not digitally signed.\n\n\nThis setting

This policy setting allows you to configure the number of seconds Windows waits for a device installation task to complete. \n\n\nI

This setting configures the location that Windows searches for drivers when a new piece of hardware is found.\n\n\nBy default,

This policy setting allows you to display a custom message title in the notification balloon when a device installation is attempted an

This policy setting allows you to display a custom message to users in the notification balloon when a device installation is attempt

This policy setting allows you to specify whether to send a Windows error report when a generic driver is installed on a device.\n\n

This policy setting allows you to prevent Windows from creating a system restore point during device activity that would normally

This policy setting allows you to prevent Windows from retrieving device metadata from the Internet.\n \nIf you enable thi

This policy setting allows you to prevent the installation of devices that are not specifically described by any other policy setting.

This policy setting allows you to specify a list of Plug and Play hardware IDs and compatible IDs for devices that Windows is preve

This policy setting allows you to specify a list of device setup class globally unique identifiers (GUIDs) for device drivers that

This policy setting allows you to prevent Windows from installing removable devices. A device is considered removable when the dr

This policy allows you to prevent Windows from sending an error report when a device driver requests additional software during ins

This policy setting allows you to determine how drivers signed by a Microsoft Windows Publisher certificate are ranked with drivers s

This policy setting allows you to specify the order in which Windows searches source locations for device drivers. \n\n\nIf you

Set the amount of time (in seconds) that the system will wait to reboot in order to enforce a change in device installation restriction

This policy setting allows you to turn off "Found New Hardware" balloons during device installation.\n\n\nIf you enable this polic

Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Intern

Specifies whether the administrator will be prompted about going to Windows Update to search for device drivers using the Intern

This policy setting prevents redirection of specific USB devices.\n\n\nIf you enable this setting, an alternate driver for the USB d

This policy setting prevents redirection of USB devices.\n\n\nIf you enable this setting, an alternate driver for USB devices canno

Allows you to configure how often a Distributed File System (DFS) client attempts to discover domain controllers on their network.\

Specifies whether Digital Locker can run.\n\n\nDigital Locker is a dedicated download manager associated with Windows Marketplac

Specifies whether Digital Locker can run.\n\n\nDigital Locker is a dedicated download manager associated with Windows Marketplac

Substitutes custom alert text in the disk diagnostic message shown to users when a disk reports a S.M.A.R.T. fault.\n\n\nIf you en

Determines the execution level for S.M.A.R.T.-based disk diagnostics.\n\n\nSelf-Monitoring And Reporting Technology (S.M.A.R.T.) i

Turns off the boot and resume optimizations for the hybrid hard disks in the system.\n\n\nIf you enable this policy setting, the

Turns off the power save mode on the hybrid hard disks in the system.\n\n\nIf you enable this policy, the disks will not be put i

Turns off all support for the non-volatile (NV) cache on all hybrid hard disks in the system. To check if you have hybrid hard di

Turns off the solid state mode for the hybrid hard disks. \n\n\nIf you enable this policy setting, frequently written files such as

Extends the disk quota policies in this folder to NTFS file system volumes on removable media.\n\n\nIf you disable this setting or

Specifies the default disk quota limit and warning level for new users of the volume.\n\n\nThis setting determines how much disk s

Enables and disables disk quota management on all NTFS volumes of the computer, and prevents users from changing the setting.\n\

Determines whether disk quota limits are enforced and prevents users from changing the setting.\n\n\nIf you enable this setting,

Determines whether the system records an event in the local Application log when users reach their disk quota limit on a volume, a

Determines whether the system records an event in the Application log when users reach their disk quota warning level on a volume

Specifies that Distributed Link Tracking clients in this domain may use the Distributed Link Tracking (DLT) server, which runs

Specifies whether the computers to which this setting is applied may attach suffixes to an unqualified multi-label name before send

Specifies a connection-specific DNS suffix. This setting supersedes the connection-specific DNS suffixes set on the computers to w

Defines the DNS servers to which a computer sends queries when it attempts to resolve names.\n\n\nWarning: The list of the DNS se

Determines the DNS suffixes to attach to an unqualified single-label name before submission of a DNS query for that name.\n\n\nAn

Determines if dynamic update is enabled.\n\n\nComputers configured for dynamic update automatically register and update their DNS

Specifies the primary Domain Name System (DNS) suffix for all affected computers. The primary DNS suffix is used in DNS name reg

Determines whether the DNS client performs primary DNS suffix devolution in a name resolution process.\n\n\nWhen a user submits a

This policy setting determines the Domain Name System (DNS) suffix devolution level that DNS clients will use, if the clients per

Determines if a computer performing dynamic registration may register A and PTR resource records with a concatenation of its Co

Determines whether the registration of PTR resource records is enabled for the computers to which this policy is applied.\n\n\nB

Specifies the Registration Refresh Interval of A and PTR resource records for computers to which this setting is applied. This s

Determines whether a DNS client that attempts to register its A resource record should overwrite an existing A resource record o

Specifies the value for the Time-To-Live (TTL) field in A and PTR resource records registered by the computers to which this settin

Local Link Multicast Name Resolution (LLMNR) is a secondary name resolution protocol. Queries are sent over the Local Link, a si

Specifies whether the computers to which this setting is applied use secure dynamic update or standard dynamic update for regis

Specifies whether the computers to which this setting is applied may send dynamic updates to the zones named with a single label

This policy setting controls the ability to change the color of window frames.\n\n\nIf you enable this policy setting, you prevent

This policy setting controls the ability to change the color of window frames.\n\n\nIf you enable this policy setting, you prevent

This policy setting controls how some graphics are rendered and facilitates other features, including Flip, Flip3D, and Taskbar Thumb

This policy setting controls how some graphics are rendered and facilitates other features, including Flip, Flip3D, and Taskbar Thumb

Flip3D is a 3D window switcher.\n\n\nIf you enable this setting, Flip3D will be inaccessible.\n\n\nIf you disable or do not configure t

Flip3D is a 3D window switcher.\n\n\nIf you enable this setting, Flip3D will be inaccessible.\n\n\nIf you disable or do not configure t

This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizing win

This policy setting controls the appearance of window animations such as those found when restoring, minimizing, and maximizing win

This policy setting controls the default color for window frames when the user does not specify a color.\n\n\nIf you enable this poli

This policy setting controls the default color for window frames when the user does not specify a color.\n\n\nIf you enable this poli

Prevents Windows Explorer from encrypting files that are moved to an encrypted folder.\n\n\nIf you disable this setting or do not

This policy setting configures whether or not users can provision certificates on Enhanced Storage certificate silo devices.\n\n\nIf

This policy setting configures whether or not only USB root hub connected Enhanced Storage devices are allowed. Allowing only

This policy setting allows you to configure a list of Enhanced Storage devices by manufacturer and product ID that are usable on

This policy setting allows you to create a list of IEEE 1667 silos, compliant with the Institute of Electrical and Electronics Engin

This policy setting configures whether or not non-Enhanced Storage removable devices are allowed on your computer.\n\n\nIf yo

This policy setting configures whether or not a password can be used to unlock an Enhanced Storage device.\n\n\nIf you enable

This policy will enable the Enhanced Storage device to be locked when the computer is locked.\n\n\nThis policy is supported in

This setting determines the corporate server to which Windows Error Reporting will send reports (instead of sending reports to M

This setting determines the consent behavior of Windows Error Reporting. If Consent level is set to "Always ask before sending da

This setting determines the consent behavior of Windows Error Reporting. If Consent level is set to "Always ask before sending da

Configures how errors are reported and what information is sent when Error Reporting is enabled.\n\n\nThis Policy will not enable o

This setting controls the behavior of the Windows Error Reporting archive. If Archive behavior is set to "Store all", all data coll

This setting controls the behavior of the Windows Error Reporting archive. If Archive behavior is set to "Store all", all data coll

This setting determines the behavior of the Windows Error Reporting queue. If Queuing behavior is set to "Default", Windows wi

This setting determines the behavior of the Windows Error Reporting queue. If Queuing behavior is set to "Default", Windows wi

This policy setting determines the consent behavior of Windows Error Reporting for specific event types.\n\n\nIf this policy settin

This policy setting determines the consent behavior of Windows Error Reporting for specific event types.\n\n\nIf this policy settin

This setting controls whether or not errors in general applications are included when error reporting is enabled.\n\n\nWhen this sett

If this setting is enabled Windows Error Reporting events will not be logged to the system event log.

If this setting is enabled Windows Error Reporting events will not be logged to the system event log.

If this setting is enabled, Windows Error Reporting will not send any problem information to Microsoft. Additionally, solution infor

If this setting is enabled, Windows Error Reporting will not send any problem information to Microsoft. Additionally, solution infor

Use this setting to control whether or not a user is given the choice to report an error.\n\n\nWhen Display Error Notification is ena

If this setting is enabled any additional data requests from Microsoft in response to a Windows Error Reporting event will be autom

If this setting is enabled any additional data requests from Microsoft in response to a Windows Error Reporting event will be autom

This setting determines the behavior of the default consent setting in relation to custom consent settings. If this setting is enable

This setting determines the behavior of the default consent setting in relation to custom consent settings. If this setting is enable

This setting specifies the applications that are always included in error reporting.\n\n\nWhen this setting is enabled, You can creat

This setting determines the behavior of the error reporting exclusion list. Windows will not send reports for any process added t

This setting determines the behavior of the error reporting exclusion list. Windows will not send reports for any process added t

This setting controls error reporting for errors in general applications when error reporting is enabled.\n\n\nThe "Default" dropdown l

This policy setting prevents the display of the user interface for critical errors.\n\n\nIf you enable this policy setting, Windows Erro

This setting controls whether or not errors in the operating system are included when error reporting is enabled.\n\n\nWhen this sett

This policy setting allows you to configure the server address, refresh interval, and issuer certificate authority (CA) of a

Controls resource usage for the forwarder. Each setting applies across all subscriptions for the forwarder.

This policy setting controls Event Log behavior when the log file reaches its maximum size and takes effect only if the ΓÇ£Retain




This policy setting specifies to use the security descriptor for the log using the Security Descriptor Definition Language (SDDL) str

This policy setting specifies to use the security descriptor for the log using the Security Descriptor Definition Language (SDDL) st

This policy setting specifies to use the security descriptor for the log using the Security Descriptor Definition Language (SDDL) str

This policy setting specifies to use the security descriptor for the log using the Security Descriptor Definition Language (SDDL) st

This policy setting controls the location of the log file. The location of the file must be writable by the Event Log service and sho




This policy setting specifies the maximum size of the log file in kilobytes.\n\n\nIf you enable this policy setting, you can config




This policy setting controls Event Log behavior when the log file reaches its maximum size.\n\n\nWhen this policy setting is enab




This policy setting turns on logging.\n\n\nIf you enable or do not configure this policy setting, then events can be written to this

This is the program that will be invoked when the user clicks the events.asp link.

This specifies the command line parameters that will be passed to the events.asp program

This is the URL that will be passed to the Description area in the Event Properties dialog box. Change this value if you want to u

This policy setting configures Windows Explorer to always display the menu bar.\n\n\nNote: By default, the menu bar is not displ

This policy setting allows administrators to prevent users from adding new items such as files or folders to the root of their Users

Sets the target of the More Information link that will be displayed when the user attempts to run a program that is blocked by poli

This policy is similar to settings directly available to computer users. Disabling animations can improve usability for users with

Disabling data execution prevention can allow certain legacy plug-in applications to function without terminating Explorer.

Disabling heap termination on corruption can allow certain legacy plug-in applications to function without terminating Explorer im

This policy setting allows you to configure the recovery behavior for corrupted files to one of three states:\n\n\nRegular: Detectio

Delete notification is a feature that notifies the underlying storage device of clusters that are freed due to a file delete operation.\n

Compression can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creat

Encryption can add to the processing overhead of filesystem operations. Enabling this setting will prevent access to and creation

Encrypting the page file prevents malicious users from reading data that has been paged to disk, but also adds processing overhea

Symbolic links can introduce vulnerabilities in certain applications. To mitigate this issue, you can selectively enable or disab

These settings provide control over whether or not short names are generated during file creation. Some applications require sh

All redirected shell folders, such as Contacts, Documents, Desktop, Favorites, Music, Pictures, Videos, Start Menu, and AppData\Roam

This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Progra

This policy setting allows the administrator to define whether Folder Redirection should use localized names for the All Progra

Hides the Details Pane in Windows Explorer.\n\n\nIf you enable this policy setting, the Details Pane in Windows Explorer is hidden

Hides the Preview Pane in Windows Explorer.\n\n\nIf you enable this policy setting, the Preview Pane in Windows Explorer is hidd

If you enable this policy setting, the Diagnostic Policy Service (DPS) will detect, troubleshoot and attempt to resolve automatical

Manages download of game box art and ratings from the Windows Metadata Services.\n\n\nIf you enable this setting, game informa

Manages download of game update information from Windows Metadata Services.\n\n\nIf you enable this setting, game update inf

Tracks the last play time of games in the Games folder.\n\n\nIf you enable this setting the last played time of games will not be re

Determines how programs interpret two-digit years.\n\n\nThis setting specifies the largest two-digit year interpreted as being pre

This policy prevents users from changing their user geographical location (GeoID).\n\n\nIf this policy is Enabled, then the user can

This policy prevents users from changing their user geographical location (GeoID).\n\n\nIf this policy is Enabled, then the user can

This policy prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of lo

This policy prevents a user from selecting a supplemental custom locale as their user locale. The user is restricted to the set of lo

This policy prevents the user from customizing their locale by changing their user overrides.\n\n\nAny existing overrides in place w

This policy prevents the user from customizing their locale by changing their user overrides.\n\n\nAny existing overrides in place w

This is a setting for computers with more than one UI language installed. If you enable this setting, the UI language of Window

This policy removes the Administrative options from the Regional and Language Options control panel. Administrative options inclu

This policy removes the option to change the user's geographical location (GeoID) from the Language and Regional Options control

This policy removes the option to change the user's menus and dialogs (UI) language from the Language and Regional Options contr

This policy removes the regional formats interface from the Regional and Language Options control panel. This does not, however,

This setting restricts users to the specified language by disabling the menus and dialog box controls in the Regional and Languag

This policy restricts the permitted system locales to the specified list. If the list is empty, it locks the system locale to its c

This policy restricts users on a machine to the specified list of user locales. If the list is empty, it locks all user locales to th

This policy restricts users on a machine to the specified list of user locales. If the list is empty, it locks all user locales to th

This is a setting for computers with more than one UI language installed. If you enable this setting the UI language of Windows me

This is a setting for computers with more than one UI language installed. If you enable this setting the UI language of Windows

Allows user-based policy processing, roaming user profiles, and user object logon scripts for interactive logons across forests.\n

Always use local ADM files for the Group Policy snap-in.\n\n\nBy default, when you edit a Group Policy object (GPO) using the Gr

Creates new Group Policy object links in the disabled state.\n\n\nThis setting creates all new Group Policy object links in the dis

Sets the default display name for new Group Policy objects.\n\n\nThis setting allows you to specify the default name for new G

This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data.\n\n\nBy default, interactively log

This setting controls the ability of users to view their Resultant Set of Policy (RSoP) data.\n\n\nBy default, interactively log

Determines when disk quota policies are updated.\n\n\nThis setting affects all policies that use the disk quota component of Gr

Determines when encryption policies are updated.\n\n\nThis setting affects all policies that use the encryption component of Gro

Prevents administrators from viewing or using Group Policy preferences.\n\n\nA Group Policy administration (.adm) file can contai

Determines when folder redirection policies are updated.\n\n\nThis setting affects all policies that use the folder redirection c

Determines which domain controller the Group Policy Object Editor snap-in uses.\n\n\n-- "Use the Primary Domain Controller" ind

Specifies how often Group Policy for computers is updated while the computer is in use (in the background). This setting specifie

Specifies how often Group Policy is updated on domain controllers while they are running (in the background). The updates specifi

Specifies how often Group Policy for users is updated while the computer is in use (in the background). This setting specifies a

Defines a slow connection for purposes of applying and updating Group Policy.\n\n\nIf the rate at which data is transferred from t

Defines a slow connection for purposes of applying and updating Group Policy.\n\n\nIf the rate at which data is transferred from t

Determines when Internet Explorer Maintenance policies are updated.\n\n\nThis setting affects all policies that use the Interne

Determines when IP security policies are updated.\n\n\nThis setting affects all policies that use the IP security component of G

Determines when registry policies are updated.\n\n\nThis setting affects all policies in the Administrative Templates folder and

This setting allows you to control a user's ability to invoke a computer policy refresh.\n\n\nIf you enable this setting, users may n

Determines when policies that assign shared scripts are updated.\n\n\nThis setting affects all policies that use the scripts com

Determines when security policies are updated.\n\n\nThis setting affects all policies that use the security component of Group P

Determines when software installation policies are updated.\n\n\nThis setting affects all policies that use the software installa

This policy setting specifies how long Group Policy should wait for network availability notifications during startup policy proces

Prevents the system from updating the Administrative Templates source files automatically when you open the Group Policy Object

Prevents Group Policy from being updated while the computer is in use. This setting applies to Group Policy for computers, users,

This policy setting prevents Local Group Policy objects (Local GPOs) from being applied.\n\n\nBy default, the policy settings in

This setting allows you to enable or disable Resultant Set of Policy (RSoP) logging on a client computer.\n\n\nRSoP logs informa

Applies alternate user settings when a user logs on to a computer affected by this setting.\n\n\nThis setting directs the system t

Determines when policies that assign wired network settings are updated.\n\n\nThis setting affects all policies that use the wi

Determines when policies that assign wireless network settings are updated.\n\n\nThis setting affects all policies that use the

This policy setting allows you to configure when preference items in the Applications preference extension are updated.\n\n\nIf

This policy setting allows you to configure the level of detail recorded by event logging for the Applications preference extension

This policy setting allows you to configure the level of detail recorded by event logging for the Data Sources preference extensio

This policy setting allows you to configure the level of detail recorded by event logging for the Devices preference extension, an

This policy setting allows you to configure the level of detail recorded by event logging for the Drive Maps preference extension,

This policy setting allows you to configure the level of detail recorded by event logging for the Environment preference extension

This policy setting allows you to configure the level of detail recorded by event logging for the Files preference extension, and t

This policy setting allows you to configure the level of detail recorded by event logging for the Folder Options preference extens

This policy setting allows you to configure the level of detail recorded by event logging for the Folders preference extension, and

This policy setting allows you to configure the level of detail recorded by event logging for the Ini Files preference extension, a

This policy setting allows you to configure the level of detail recorded by event logging for the Internet preference extension, an

This policy setting allows you to configure the level of detail recorded by event logging for the Local User and Local Group prefe

This policy setting allows you to configure the level of detail recorded by event logging for the Network Options preference exten

This policy setting allows you to configure the level of detail recorded by event logging for the Network Shares preference extens

This policy setting allows you to configure the level of detail recorded by event logging for the Power Options preference extensi

This policy setting allows you to configure the level of detail recorded by event logging for the Printers preference extension, an

This policy setting allows you to configure the level of detail recorded by event logging for the Regional Options preference exte

This policy setting allows you to configure the level of detail recorded by event logging for the Registry preference extension, an

This policy setting allows you to configure the level of detail recorded by event logging for the Scheduled Tasks preference exten

This policy setting allows you to configure the level of detail recorded by event logging for the Services preference extension, an

This policy setting allows you to configure the level of detail recorded by event logging for the Shortcuts preference extension, a

This policy setting allows you to configure the level of detail recorded by event logging for the Start Menu preference extension,

This policy setting allows you to configure when preference items in the Data Sources preference extension are updated.\n\n\nI

This policy setting allows you to configure when preference items in the Devices preference extension are updated.\n\n\nIf you

This policy setting allows you to configure when preference items in the Drive Maps preference extension are updated.\n\n\nIf

This policy setting allows you to configure when preference items in the Environment preference extension are updated.\n\n\nIf

This policy setting allows you to configure when preference items in the Files preference extension are updated.\n\n\nIf you en

This policy setting allows you to configure when preference items in the Folder Options preference extension are updated.\n\n\

This policy setting allows you to configure when preference items in the Folders preference extension are updated.\n\n\nIf you

This policy setting allows you to configure when preference items in the Ini Files preference extension are updated.\n\n\nIf yo

This policy setting allows you to configure when preference items in the Internet Settings preference extension are updated.\n\

This policy setting allows you to configure when preference items in the Local Users and Groups preference extension are updat

This policy setting allows you to configure when preference items in the Network Options preference extension are updated.\n\n

This policy setting allows you to configure when preference items in the Network Shares preference extension are updated.\n\n\

This policy setting allows you to permit or prohibit use of Application snap-ins (Application preference item types). When prohibit

This policy setting allows you to permit or prohibit use of the Applications preference extension. When a preference extension is pro

This policy setting allows you to permit or prohibit use of the Control Panel Settings item and all preference extensions listed i

This policy setting allows you to permit or prohibit use of the Control Panel Settings item and all preference extensions listed in

This policy setting allows you to permit or prohibit use of the Data Sources preference extension. When a preference extension is pr

This policy setting allows you to permit or prohibit use of the Devices preference extension. When a preference extension is prohibi

This policy setting allows you to permit or prohibit use of the Drive Maps preference extension. When a preference extension is prohi

This policy setting allows you to permit or prohibit use of the Environment preference extension. When a preference extension is pro

This policy setting allows you to permit or prohibit use of the Files preference extension. When a preference extension is prohibited

This policy setting allows you to permit or prohibit use of the Folder Options preference extension. When a preference extension is

This policy setting allows you to permit or prohibit use of the Folders preference extension. When a preference extension is prohibit

This policy setting allows you to permit or prohibit use of the Ini Files preference extension. When a preference extension is prohib

This policy setting allows you to permit or prohibit use of the Internet Settings preference extension. When a preference extension i

This policy setting allows you to permit or prohibit use of the Local Users and Groups preference extension. When a preference exten

This policy setting allows you to permit or prohibit use of the Network Options preference extension. When a preference extension is

This policy setting allows you to permit or prohibit use of the Network Shares preference extension. When a preference extension is

This policy setting allows you to permit or prohibit use of the Power Options preference extension. When a preference extension is p

This policy setting allows you to permit or prohibit use of the Preferences tab. When prohibited, the Preferences tab does not ap

This policy setting allows you to permit or prohibit use of the Printers preference extension. When a preference extension is prohib

This policy setting allows you to permit or prohibit use of the Regional Options preference extension. When a preference extension i

This policy setting allows you to permit or prohibit use of the Registry preference extension. When a preference extension is prohibi

This policy setting allows you to permit or prohibit use of the Scheduled Tasks preference extension. When a preference extension is

This policy setting allows you to permit or prohibit use of the Services preference extension. When a preference extension is prohib

This policy setting allows you to permit or prohibit use of the Shortcuts preference extension. When a preference extension is prohib

This policy setting allows you to permit or prohibit use of the Start Menu preference extension. When a preference extension is proh

This policy setting allows you to configure when preference items in the Power Options preference extension are updated.\n\n\n

This policy setting allows you to configure when preference items in the Printers preference extension are updated.\n\n\nIf you

This policy setting allows you to configure when preference items in the Regional Options preference extension are updated.\n\

This policy setting allows you to configure when preference items in the Registry preference extension are updated.\n\n\nIf you

This policy setting allows you to configure when preference items in the Scheduled Tasks preference extension are updated.\n\n

This policy setting allows you to configure when preference items in the Services preference extension are updated.\n\n\nIf you

This policy setting allows you to configure when preference items in the Shortcuts preference extension are updated.\n\n\nIf yo

This policy setting allows you to configure when preference items in the Start Menu preference extension are updated.\n\n\nIf y

This policy setting allows Microsoft Windows to process user Group Policy settings asynchronously when logging on through Rem

With this policy, you can restrict certain HTML Help commands to function only in HTML Help (.chm) files within specified folders

Allows you to restrict programs from being run from online Help.\n\n\nIf you enable this setting, you can prevent programs that you

Allows you to restrict programs from being run from online Help.\n\n\nIf you enable this setting, you can prevent programs that you

\n\n This policy setting allows you to exclude HTML Help Executable from being monitored by software-enforced DEP.\n

Specifies whether active content links in trusted assistance content are rendered. By default, the Help viewer renders trusted ass

Specifies whether users can participate in the Help Experience Improvement program. The Help Experience Improvement program co

Specifies whether users can provide ratings for Help content.\n\n\nIf this setting is enabled, this policy setting prevents ratings

Specifies whether users can search and view content from Windows Online in Help and Support. Windows Online provides the most u

This policy setting allows you to manage whether HotStart buttons can be used to launch applications.\n\n\nIf you enable this poli

This policy setting allows you to manage whether HotStart buttons can be used to launch applications.\n\n\nIf you enable this poli

Specifies whether Windows can access the Internet to accomplish tasks that require Internet resources.\n\n\nIf this setting is enabled,

Specifies whether Windows can access the Internet to accomplish tasks that require Internet resources.\n\n\nIf this setting is enabled,

This setting allows you to remove access to Windows Update.\n\n\nIf you enable this setting, all Windows Update features are r

Specifies whether to automatically update root certificates using the Windows Update Web site. \n\n\nTypically, a certificate is u

Specifies whether to allow this client to download print driver packages over HTTP.\n\n\nTo set up HTTP printing, non-inbox drivers

Specifies whether to allow this client to download print driver packages over HTTP.\n\n\nTo set up HTTP printing, non-inbox drivers

Specifies whether "Events.asp" hyperlinks are available for events within the Event Viewer application.\n\n\nThe Event Viewer nor

Specifies whether to show the "Did you know?" section of Help and Support Center.\n\n\nThis content is dynamically updated when

Specifies whether users can perform a Microsoft Knowledge Base search from the Help and Support Center.\n\n\nThe Knowledge Base

Specifies whether the Internet Connection Wizard can connect to Microsoft to download a list of Internet Service Providers (ISPs).\n\

Specifies whether Windows should download a list of providers for the Web publishing and online ordering wizards.\n\n\nThese wiza

Specifies whether Windows should download a list of providers for the Web publishing and online ordering wizards.\n\n\nThese wiza

Specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association.\n\

Specifies whether to use the Microsoft Web service for finding an application to open a file with an unhandled file association.\n\

Specifies whether to allow printing over HTTP from this client.\n\n\nPrinting over HTTP allows a client to print to printers on the i

Specifies whether to allow printing over HTTP from this client.\n\n\nPrinting over HTTP allows a client to print to printers on the i

Specifies whether the Windows Registration Wizard connects to Microsoft.com for online registration.\n\n\nIf you enable this sett

Specifies whether Search Companion should automatically download content updates during local and Internet searches.\n\n\nWhen

Specifies whether the "Order Prints Online" task is available from Picture Tasks in Windows folders.\n\n\nThe "Order Prints Online"

Specifies whether the "Order Prints Online" task is available from Picture Tasks in Windows folders.\n\n\nThe "Order Prints Online"

Specifies whether the tasks "Publish this file to the Web," "Publish this folder to the Web," and "Publish the selected items to t

Specifies whether the tasks "Publish this file to the Web," "Publish this folder to the Web," and "Publish the selected items to t

Specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used.\n\

Specifies whether Windows Messenger collects anonymous information about how Windows Messenger software and service is used.\n\

The Windows Customer Experience Improvement Program will collect information about your hardware configuration and how you use

Controls whether or not errors are reported to Microsoft.\n\n\nError Reporting is used to report information about a system or app

This policy setting turns off the active tests performed by the Windows Network Connectivity Status Indicator (NCSI) to determine

This policy specifies whether Windows searches Windows Update for device drivers when no local drivers for a device are present

When you enable this setting, it will prevent Internet Information Services (IIS) from being installed, and you will not be able to

This policy setting allows you to manage whether Internet Explorer can access data from another security zone using the Micros




















This policy setting allows you to add a specific set of search providers to the user's default search provider list. Normally, sear

This policy setting allows you to add a specific set of search providers to the user's default search provider list. Normally, sear

This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer. Add-ons in this case are

This policy setting allows you to manage a list of add-ons to be allowed or denied by Internet Explorer. Add-ons in this case are

For each zone, the Binary and Scripted Behavior security restrictions may be configured to allow only a list of admin-approved beha

For each zone, the Binary and Scripted Behavior security restrictions may be configured to allow only a list of admin-approved beha

This policy setting allows you to manage whether processes respect add-on management user preferences (as reflected by Add-on Ma

Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to w

Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received th

This policy setting allows you to manage whether the Information Bar is displayed for processes other than the Internet Explorer proc

Internet Explorer places zone restrictions on each Web page it opens, which are dependent upon the location of the Web page (Inter

This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more danger

The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on

Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manne

This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a

Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page

This policy setting enables applications hosting the Web Browser Control to block automatic prompting of ActiveX control installatio

This policy setting enables applications hosting the Web Browser Control to block automatic prompting of file downloads that are not

Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictions

This policy setting allows this feature to be prevented or allowed for all processes running on the machine.\n\n\nIf you enable thi

This policy setting allows you to manage whether processes respect add-on management user preferences (as reflected by Add-on Ma

Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to w


This policy setting allows you to manage whether the Information Bar is displayed for processes other than the Internet Explorer proc



The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on

Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manne






This policy setting allows this feature to be prevented or allowed for all processes running on the machine.\n\n\nIf you enable thi

This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run.\n

This policy setting allows you to manage whether users receive a dialog requesting permission for active content on a CD to run.\n

This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Intranet Zone can run ac



This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Trusted Sites Zone can r





This policy setting allows you to manage whether a resource hosted on an admin-restricted protocol in the Trusted Sites Zone can r


This policy setting allows you to manage whether script code on pages in the zone is run.\n\n\nIf you enable this policy setting, s

This policy setting allows you to manage whether script code on pages in the zone is run.\n\n\nIf you enable this policy setting,



















This policy setting allows you to manage dynamic binary and script behaviors: components that encapsulate specific functionality




















This policy setting allows you to manage whether scripts can perform a clipboard operation (for example, cut, copy, and paste) in a




















This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone.\n\n\nIf






This policy setting allows you to manage whether users can drag files or copy and paste files from a source within the zone.\n\n\nI














This policy setting allows you to manage whether file downloads are permitted from the zone. This option is determined by the zone




















This policy setting allows you to manage whether pages of the zone may download HTML fonts.\n\n\nIf you enable this policy sett




















This policy setting allows you to manage whether users can download and install self-installing program files (non-Internet Explo

This policy setting allows you to manage whether users can download and install self-installing program files (non-Internet Explo

This policy setting allows you to manage whether users can automatically download and install Web components (such as fonts) t

This policy setting allows you to manage whether users can automatically download and install Web components (such as fonts) t

This policy setting allows you to manage whether users can install Active Desktop items from this zone. The settings for this optio




This policy setting allows you to manage whether users can install Active Desktop items from this zone. The settings for this option
















This policy setting allows you to manage whether a user's browser can be redirected to another Web page if the author of the Web




















This policy setting controls whether a page may control embedded WebBrowser Controls via script.\n\n\nIf you enable this policy s




















This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows that include the title and stat




















This policy setting allows you to manage whether scriptlets can be allowed.\n\n\nIf you enable this policy setting, users will be able




















This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the

This policy setting allows you to manage whether software, such as ActiveX controls and file downloads, can be installed or run by the

This policy setting allows you to manage whether script is allowed to update the status bar within the zone.\n\n\nIf you enable this po


This policy setting allows you to manage whether script is allowed to update the status bar within the zone.\n\n\nIf you enable this p


















This policy setting specifies whether placeholders should be shown for graphical images while they are downloading. This allows i

This policy setting specifies whether you want Internet Explorer to print background colors and images when you print a Web page.

This policy setting allows you to manage whether Internet Explorer will launch COM add-ons known as browser helper objects, such a

This policy setting allows you to manage whether Internet Explorer will launch COM add-ons known as browser helper objects, such a

This policy setting allows you to play video and animation through legacy media players in a specified zone. Video and animation




















This policy setting controls whether websites can open new Internet Explorer Windows with no Status Bar or Address Bar.\n\n\nIf




















This policy setting determines whether script Prompt dialogs are automatically displayed.\n\n\nIf you enable this policy setting, s




















Designates the Audio/Video Player ActiveX control as administrator-approved.\n\n\nThis control is used for playing sounds, videos,

This policy setting allows you to auto-hide all toolbars except the navigation bar when focus is not in a browser toolbar.\n\n\nIf yo

This policy setting allows you to auto-hide all toolbars except the navigation bar when focus is not in a browser toolbar.\n\n\nIf yo

This policy setting manages whether users will be automatically prompted for ActiveX control installations.\n\n\nIf you enable this p




















This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, use




















This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer

This policy setting allows you to manage whether Internet Explorer checks the Internet for newer versions. When Internet Explorer

Designates the Microsoft Network (MSN) Carpoint automatic pricing control as administrator-approved.\n\n\nThis control enables en

This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificate

This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificate

This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of

This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of

Delete Browsing History on exit automatically deletes specified items when the last browser window closes. The preferences selected

Delete Browsing History on exit automatically deletes specified items when the last browser window closes. The preferences selected

Allows Administrators to enable and disable the Media Explorer Bar and set the auto-play default.\n\n\nThe Media Explorer Bar play

When users open a new tab page, they can choose whether the new tab opens a blank page (about:blank), the first page of their ho

When users open a new tab page, they can choose whether the new tab opens a blank page (about:blank), the first page of their ho

Allows Administrators to enable and disable the ability for Outlook Express users to save or open attachments that can potentially

Specifies which buttons will be displayed on the standard toolbar in Microsoft Internet Explorer.\n\n\nIf you enable this policy, you

This policy setting allows you to choose among three different labels for the command button: show all text labels, show selectiv

This policy setting allows you to choose among three different labels for the command button: show all text labels, show selectiv

This policy setting allows you to customize the Internet Explorer version string as reported to Web servers in the HTTP User Agent

This policy setting allows you to customize the Internet Explorer version string as reported to Web servers in the HTTP User Agent

This policy setting allows you to ensure that any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are denie

This policy setting allows you to ensure that any Internet Explorer add-ons not listed in the 'Add-on List' policy setting are denie

This policy setting allows you to add default Accelerators. \n\n\nIf you enable this policy, the specified Accelerators will be add

This policy setting allows you to add default Accelerators. \n\n\nIf you enable this policy, the specified Accelerators will be add

This policy setting allows you to add non-default Accelerators. \n\n\nIf you enable this policy, the specified Accelerators will be

This policy setting allows you to add non-default Accelerators. \n\n\nIf you enable this policy, the specified Accelerators will be

This ActiveX control enables users to edit HTML text and see a faithful rendition of how the text would look in the browser. There a

This setting specifies the number of days that Internet Explorer tracks views of pages in the History List. To access the Temporary

This setting specifies the number of days that Internet Explorer tracks views of pages in the History List. To access the Temporary

This policy setting prevents the userΓÇÖs machine from launching Microsoft .NET Framework setup when navigating to .NET Framewo




















Prevents users from adding channels to Internet Explorer.\n\n\nChannels are Web sites that are updated automatically on your com

Prevents users from specifying that Web pages can be downloaded for viewing offline. When users make Web pages available for off

Disables existing schedules for downloading Web pages for offline viewing.\n\n\nWhen users make Web pages available for offline

This AutoComplete feature suggests possible matches when users are filling up forms.\n\n\nIf you enable this setting, the user is

Prevents Internet Explorer from automatically installing components.\n\n\nIf you enable this policy, it prevents Internet Explore

Prevents automatic proxy scripts, which interact with a server to automatically configure users' proxy settings, from being stored i

If you enable this policy, the user cannot modify the Accessibility options. All options in the "Accessibility" window on the Gen

Prevents users from changing settings on the Advanced tab in the Internet Options dialog box.\n\n\nIf you enable this policy, us

This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Exp

This setting specifies to automatically detect the proxy server settings used to connect to the Internet and customize Internet Exp

Prevents users from changing the default programs for managing schedules and contacts.\n\n\nIf you enable this policy, the Cale

Prevents users from changing certificate settings in Internet Explorer. Certificates are used to verify the identity of software pu

Prevents users from changing the default Web page colors.\n\n\nIf you enable this policy, the color settings for Web pages appea

Prevents users from changing dial-up settings.\n\n\nIf you enable this policy, the Settings button on the Connections tab in the

Prevents users from changing dial-up settings.\n\n\nIf you enable this policy, the Settings button on the Connections tab in the

Prevents Microsoft Internet Explorer from checking to see whether it is the default browser.\n\n\nIf you enable this policy, the

Prevents users from changing font settings.\n\n\nIf you enable this policy, users will not be able to change font settings for vie

The Home page specified on the General tab of the Internet Options dialog box is the default Web page that Internet Explorer lo

Prevents users from changing language preference settings.\n\n\nIf you enable this policy, users will not be able to set language

Prevents users from changing the colors of links on Web pages.\n\n\nIf you enable this policy, the color settings for links appea

Prevents users from changing the default programs for messaging tasks.\n\n\nIf you enable this policy, the E-mail, Newsgroups, a

Prevents users from changing Profile Assistant settings.\n\n\nIf you enable this policy, the My Profile button appears dimmed in t

This setting specifies to connect to the internet using the proxy server settings specified. A proxy server acts as an intermediary

This setting specifies to connect to the internet using the proxy server settings specified. A proxy server acts as an intermediary

Prevents users from changing ratings that help control the type of Internet content that can be viewed.\n\n\nIf you enable this po

Secondary home pages are the default Web pages that Internet Explorer loads in separate tabs from the home page whenever the

Prevents users from changing the browser cache settings, such as the location and amount of disk space to use for the Temporary I

Prevents users from viewing the Channel bar interface. Channels are Web sites that are automatically updated on their computer ac

Prevents the shortcut menu from appearing when users click the right mouse button while using the browser.\n\n\nIf you enable th

Prevents users from determining which buttons appear on the Microsoft Internet Explorer and Windows Explorer standard toolbars

Prevents users from determining which toolbars are displayed in Microsoft Internet Explorer and Windows Explorer.\n\n\nIf you en

Prevents content from being downloaded from Web sites that users have subscribed to.\n\n\nWhen users make Web pages available fo

Prevents users from adding, editing, or removing schedules for offline viewing of Web pages and groups of Web pages that users h

Prevents users from editing an existing schedule for downloading Web pages for offline viewing.\n\n\nWhen users make Web pages av

Prevents branding of Internet programs, such as customization of Internet Explorer and Outlook Express logos and title bars, by ano

This policy settings disables the Import/Export Settings wizard. This wizard allows you to import settings from another browser, impor

Prevents users from running the Internet Connection Wizard.\n\n\nIf you enable this policy, the Setup button on the Connections

Prevents channel providers from recording information about when their channel pages are viewed by users who are working offline.\

Prevents using the shortcut menu to open a link in a new browser window.\n\n\nIf you enable this policy, users cannot point to

Prevents Internet Explorer from checking whether a new version of the browser is available.\n\n\nIf you enable this policy, it preve

This policy setting allows you to disable the per-user installation of ActiveX controls. This policy only affects ActiveX controls tha

This policy setting allows you to disable the per-user installation of ActiveX controls. This policy only affects ActiveX controls tha

Prevents users from disabling channel synchronization in Microsoft Internet Explorer.\n\n\nChannels are Web sites that are automa

Prevents users from clearing the preconfigured settings for Web pages to be downloaded for offline viewing.\n\n\nWhen users make

Prevents users from saving a program or file that Microsoft Internet Explorer has downloaded to the hard disk.\n\n\nIf you enable

Prevents the Internet Explorer splash screen from appearing when users start the browser.\n\n\nIf you enable this policy, the spla

Specifies that programs using the Microsoft Software Distribution Channel will not notify users when they install new components.

Removes the Advanced tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are preven

Removes the Advanced tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are preven

Removes the Connections tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are pre

Removes the Connections tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are pre

If you enable this policy setting, users are prevented from seeing and changing ratings, certificates, AutoComplete, Wallet, and Pro

If you enable this policy setting, users are prevented from seeing and changing ratings, certificates, AutoComplete, Wallet, and Pro

Removes the General tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are unable t

Removes the General tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are unable t

Removes the Privacy tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are prevented

Removes the Privacy tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are prevented

Removes the Programs tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are preven

Removes the Programs tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, users are preven

Prevents users from restoring default settings for home and search pages.\n\n\nIf you enable this policy, the Reset Web Settings

Removes the Security tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, it prevents users f

Removes the Security tab from the interface in the Internet Options dialog box.\n\n\nIf you enable this policy, it prevents users f

This policy setting allows you to configure whether or not Toolbars and Browser Helper Objects (BHOs) are loaded by default durin

This policy setting allows you to configure whether or not Toolbars and Browser Helper Objects (BHOs) are loaded by default durin

Specifies that error messages will be displayed to users if problems occur with proxy scripts.\n\n\nIf you enable this policy, erro

This policy setting allows you to manage whether users can display nonsecure items and manage whether users receive a security i




















This policy setting prevents users from using the Reset Internet Explorer Settings feature. Reset Internet Explorer Settings will all

This policy setting prevents users from using the Reset Internet Explorer Settings feature. Reset Internet Explorer Settings will all

This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager.\n\n\nIf

This policy setting allows you to manage whether users have the ability to allow or deny add-ons through Add-On Manager.\n\n\nIf

This policy setting allows you to disable collection of data used by the InPrivate Filtering Automatic mode.\n\n\nThe data consists of

This policy setting allows you to disable collection of data used by the InPrivate Filtering Automatic mode.\n\n\nThe data consists of

This policy setting allows you to manage whether users are prompted to select a certificate when no certificate or only one certific




















This policy setting allows you to manage whether Internet Explorer will save encrypted pages that contain secure (HTTPS) informa

This policy setting allows you to manage whether Internet Explorer will save encrypted pages that contain secure (HTTPS) informa

This policy setting allows you to manage whether users may download signed ActiveX controls from a page in the zone.\n\n\nIf you




















This policy setting allows you to manage whether users may download unsigned ActiveX controls from the zone. Such code is potenti




















This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder afte

This policy setting allows you to manage whether Internet Explorer deletes the contents of the Temporary Internet Files folder afte

This policy setting allows users to run natively implemented scriptable XMLHTTP.\n\n\nIf you enable this policy setting, the user

This policy setting allows users to run natively implemented scriptable XMLHTTP.\n\n\nIf you enable this policy setting, the user

The Navigation bar includes features for navigating among Web pages, searching the Web using a selection of search tools, viewin

The Navigation bar includes features for navigating among Web pages, searching the Web using a selection of search tools, viewin

Prevents users from closing Microsoft Internet Explorer and Windows Explorer.\n\n\nIf you enable this policy, the Close command o

Prevents users from opening a new browser window from the File menu.\n\n\nIf this policy is enabled, users cannot open a new

Prevents users from opening a file or Web page from the File menu in Internet Explorer.\n\n\nIf you enable this policy, the Op

Prevents users from saving the complete contents that are displayed on or run from a Web page, including the graphics, scripts,

Prevents users from saving Web pages from the browser File menu to their hard disk or to a network share.\n\n\nIf you enable thi

Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Internet security zone.\n\n\n

Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Intranet security zone.

Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Local Computer security zone

Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Restricted Sites security zon

Limits the amount of storage that a page or site using the DHTML Persistence behavior can use for the Trusted Sites security zone.\

Prevents users from displaying tips for users who are switching from Netscape.\n\n\nIf you enable this policy, the For Netscape

Prevents users from sending feedback to Microsoft by clicking the Send Feedback command on the Help menu.\n\n\nIf you enable t

Prevents users from viewing or changing the Tip of the Day interface in Microsoft Internet Explorer.\n\n\nIf you enable this polic

Prevents users from running the Internet Explorer Tour from the Help menu in Internet Explorer.\n\n\nIf you enable this policy,

Prevents users from adding, removing, editing or viewing the list of Favorite links.\n\n\nThe Favorites list is a way to store popu

This policy setting allows you to show or hide the command bar.\n\n\nIf you enable this setting, the command bar will be hidden a

This policy setting allows you to show or hide the command bar.\n\n\nIf you enable this setting, the command bar will be hidden a

This policy setting allows you to show or hide the status bar.\n\n\nIf you enable this setting, the status bar will be hidden and the

This policy setting allows you to show or hide the status bar.\n\n\nIf you enable this setting, the status bar will be hidden and the

Prevents users from configuring unique identities by using Identity Manager.\n\n\nIdentity Manager enables users to create multipl

This policy setting controls whether or not the local path information will be sent when uploading a file via a HTML form. If the l




















This policy controls the Web site compatibility lists provided by Microsoft. The updated Web site lists are available on Windows Updat

This policy controls the Web site compatibility lists provided by Microsoft. The updated Web site lists are available on Windows Updat

This policy setting allows you to manage ActiveX controls not marked as safe.\n\n\nIf you enable this policy setting, ActiveX cont




This policy setting allows you to manage ActiveX controls not marked as safe.\n\n\nIf you enable this policy setting, ActiveX contr
















This policy setting allows you configure the threshold for InPrivate Filtering Automatic mode.\n\n\nThe threshold sets the number o

This policy setting allows you configure the threshold for InPrivate Filtering Automatic mode.\n\n\nThe threshold sets the number o

Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to

Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received thr

This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or code i


This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangero

The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted o

Windows Explorer and Internet Explorer may be configured to prevent active content obtained through restricted protocols from runn



This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes.\n\n\nIf you enable this

This policy setting enables blocking of file download prompts that are not user initiated.\n\n\nIf you enable this policy setting, fil

Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictio

This policy setting allows you bypass prompting when scripts running within the Internet Explorer process attempt to perform a clipb

Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to

Internet Explorer uses Multipurpose Internet Mail Extensions (MIME) data to determine file handling procedures for files received thr

This policy setting allows you to manage whether the Information Bar is displayed for Internet Explorer processes when file or code i


This policy setting determines whether Internet Explorer MIME sniffing will prevent promotion of a file of one type to a more dangero

The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted o

Windows Explorer and Internet Explorer may be configured to prevent active content obtained through restricted protocols from runn



This policy setting enables blocking of ActiveX control installation prompts for Internet Explorer processes.\n\n\nIf you enable this

This policy setting enables blocking of file download prompts that are not user initiated.\n\n\nIf you enable this policy setting, fil

Internet Explorer allows scripts to programmatically open, resize, and reposition windows of various types. The Window Restrictio

This policy setting allows you bypass prompting when scripts running within the Internet Explorer process attempt to perform a clipb

For each zone, the Network Protocol Lockdown security restriction may be configured to prevent active content obtained through restr


This template policy setting allows you to configure policy settings in this zone consistent with a selected security level, for


This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intr

This policy setting controls whether local sites which are not explicitly mapped into any Security Zone are forced into the local Intr

This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone.\n\n\nIf you enable

This policy setting controls whether URLs representing UNCs are mapped into the local Intranet security zone.\n\n\nIf you enable

This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone.\n\n\nIf

This policy setting controls whether sites which bypass the proxy server are mapped into the local Intranet security zone.\n\n\nIf





Designates a set of Microsoft Network (MSN) Investor controls as administrator-approved.\n\n\nThese controls enable users to view

This policy setting allows you to manage permissions for Java applets.\n\n\nIf you enable this policy setting, you can choose opti




















This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference i




















This policy setting controls whether or not the "Open File - Security Warning" prompt is shown when launching executables or other
























This policy setting allows you to lock or unlock the toolbars in the user interface (UI).\n\n\nIf you enable this setting, the toolba

This policy setting allows you to lock or unlock the toolbars in the user interface (UI).\n\n\nIf you enable this setting, the toolba











This policy setting allows you to manage settings for logon options.\n\n\nIf you enable this policy setting, you can choose fro




















These are eXtensible Application Markup Language (XAML) files. XAML is an XML-based declarative markup language commonly used for




















Applies proxy settings to all users of the same computer.\n\n\nIf you enable this policy, users cannot set user-specific proxy sett

This policy setting allows you to change the default connection limit for HTTP 1.0 from 6 connections per host to a limit of your cho




Designates a set of Microsoft ActiveX controls used to manipulate pop-up menus in the browser as administrator-approved.\n\n\nI

Designates the Microsoft Agent ActiveX control as administrator-approved.\n\n\nMicrosoft Agent is a set of software services that

Designates the Microsoft Chat ActiveX control as administrator-approved.\n\n\nThis control is used by Web authors to build text-b

Designates Microsoft Scriptlet Component as an administrator approved control. It is an Active X control which is used to render

Designates Microsoft Survey Control as an administrator approved control.\n\n\nIf you enable this policy, this control can be run

The navigation bar contains icons for a variety of features including navigating among web pages, searching the web using a selec

Designates a set of MSNBC controls as administrator-approved.\n\n\nThese controls enable enhanced browsing of news reports on th

This policy setting allows you to manage the opening of windows and frames and access of applications across different domains






This policy setting allows you to manage the opening of windows and frames and access of applications across different domains.\














Designates NetShow File Transfer Control as an administrator approved control.\n\n\nIf you enable this policy, this control can b

This policy setting controls whether or not the user is prompted to allow ActiveX controls to run on Web sites other than the Web sit




















This policy setting allows you to specify how ActiveX controls are installed.\n \nIf you enable this policy setting, ActiveX controls

This policy setting allows you to specify how ActiveX controls are installed.\n \nIf you enable this policy setting, ActiveX controls

This policy setting allows you to manage MIME sniffing for file promotion from one type to another based on a MIME sniff. A MIME snif




















This policy setting allows you to manage whether Internet Explorer will display animated pictures found in Web content. Generally o

This policy setting allows you to manage whether Internet Explorer will display animated pictures found in Web content. Generally o

This policy setting allows you to manage whether Internet Explorer will play sounds found in web content. Generally only sound file

This policy setting allows you to manage whether Internet Explorer will play sounds found in web content. Generally only sound file

This policy setting allows you to manage whether Internet Explorer will display videos found in Web content. Generally only embedded

This policy setting allows you to manage whether Internet Explorer will display videos found in Web content. Generally only embedded

This policy setting allows you to specify a list of web sites that will be allowed to open pop-up windows regardless of the Intern

This policy setting allows you to specify a list of web sites that will be allowed to open pop-up windows regardless of the Intern

This policy setting prevents users from performing the "Fix settings" functionality related to Security Settings Check.\n\n\nIf you ena

This policy setting prevents users from performing the "Fix settings" functionality related to Security Settings Check.\n\n\nIf you ena

The SmartScreen Filter prevents users from navigating to and downloading from sites known to host malicious content, including Phis

The SmartScreen Filter prevents users from navigating to and downloading from sites known to host malicious content, including Phis

This policy setting specifies the action that will be performed when searching from the Address bar. There are two possible acti

This policy setting is used to prevent users from deleting cookies. This feature is available in the Delete Browsing History dialog b

This policy setting is used to prevent users from deleting cookies. This feature is available in the Delete Browsing History dialog b

This policy setting is used to turn off the preserving favorites site data option in the Delete Browsing History dialog box. \n\n\nIf y

This policy setting is used to turn off the preserving favorites site data option in the Delete Browsing History dialog box. \n\n\nIf y

This policy setting is used to prevent users from deleting form data. This feature is available in the Delete Browsing History dialog

This policy setting is used to prevent users from deleting form data. This feature is available in the Delete Browsing History dialog

This policy setting is used to prevent users from deleting InPrivate Filtering data. InPrivate Filtering data is collected during non

This policy setting is used to prevent users from deleting InPrivate Filtering data. InPrivate Filtering data is collected during non

This policy setting is used to prevent users from deleting passwords. This feature is available in the Delete Browsing History dialo

This policy setting is used to prevent users from deleting passwords. This feature is available in the Delete Browsing History dialo

This policy setting is used to prevent users from deleting temporary Internet files. This feature is available in the Delete Browsing

This policy setting is used to prevent users from deleting temporary Internet files. This feature is available in the Delete Browsing

This policy setting prevents users from deleting the history of Web sites the user has visited. This feature is available in the Dele

This policy setting prevents users from deleting the history of Web sites the user has visited. This feature is available in the Dele

Internet Explorer treats as fatal any Secure Socket Layer/Transport Layer Security (SSL/TLS) certificate errors that interrupt naviga

Internet Explorer treats as fatal any Secure Socket Layer/Transport Layer Security (SSL/TLS) certificate errors that interrupt naviga

This policy setting allows you to disable the Internet Explorer Search box. The Search box includes all installed search providers as

This policy setting allows you to disable the Internet Explorer Search box. The Search box includes all installed search providers as

This policy setting prevents users from participating in the Customer Experience Improvement Program (CEIP).\n\n\nIf you enable

This policy setting prevents users from participating in the Customer Experience Improvement Program (CEIP).\n\n\nIf you enable

This policy setting prevents performance of the First Run Customize settings ability and controls what the user will see when they

This policy setting prevents performance of the First Run Customize settings ability and controls what the user will see when they

This policy setting prevents the setting of the code download path for each machine. The Internet Component Download service expo

This policy setting prevents the configuration of cipher strength update information URLs. When you log on to secure pages, acces

This policy setting is used to manage temporary Internet files and cookies associated with your Internet browsing history, available

This policy setting is used to manage temporary Internet files and cookies associated with your Internet browsing history, available

This policy setting prevents users from using Windows colors as a part of the display settings. By default, this functionality is tur

This policy setting allows the user to choose the default text size in Internet Explorer.\n\n\nIf you enable this policy setting, a

This policy setting prevents users from configuring the background color in Internet Explorer.\n\n\nIf you enable this policy sett

This policy setting allows you to manage whether users can choose text color in Internet Explorer.\n\n\nIf you enable this policy se

This policy setting prevents users from changing the color of Web page links they have already clicked. Appropriate color choices c

This policy setting prevents users from changing the color of Web page links that they have not yet clicked. Appropriate color choi

This policy setting prevents users from specifying the color to which hyperlinks change when the mouse pointer pauses on them.\n\n

This policy setting allows you to manage whether the listed processes respect add-on management user preferences (as entered int

Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to wh


This policy setting allows you to manage whether the Information Bar is displayed for specific processes when file or code installs



The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on t

Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manner

This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a ne

Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page (




This policy setting allows administrators to define applications for which they want this feature to be prevented or allowed.\n\n\nDo

This policy setting allows you to manage whether the listed processes respect add-on management user preferences (as entered int

Internet Explorer contains dynamic binary behaviors: components that encapsulate specific functionality for the HTML elements to wh


This policy setting allows you to manage whether the Information Bar is displayed for specific processes when file or code installs



The MK Protocol Security Restriction policy setting reduces attack surface area by preventing the MK protocol. Resources hosted on t

Internet Explorer may be configured to prevent active content obtained through restricted protocols from running in an unsafe manner

This policy setting defines whether a reference to an object is accessible when the user navigates within the same domain or to a ne

Internet Explorer places restrictions on each Web page it opens. The restrictions are dependent upon the location of the Web page (




This policy setting allows administrators to define applications for which they want this feature to be prevented or allowed.\n\n\nDo

This policy setting prevents you from setting the default search provider for the address bar and the Toolbar Search Box.\n\n\nIf yo

This policy setting prevents you from setting the default search provider for the address bar and the Toolbar Search Box.\n\n\nIf yo

This policy setting allows you to restrict the search providers that will appear in the search box in Internet Explorer to a list d

This policy setting allows you to restrict the search providers that will appear in the search box in Internet Explorer to a list d





This policy setting allows you to manage whether .NET Framework components that are not signed with Authenticode can be execu




















This policy setting allows you to manage whether .NET Framework components that are signed with Authenticode can be executed f




















This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone.\n\n\nIf




















This policy setting allows you to manage whether an ActiveX control marked safe for scripting can interact with a script.\n\n\nIf you




















This policy setting allows you to manage whether applets are exposed to scripts within the zone.\n\n\nIf you enable this policy set




















Disables using the F3 key to search in Internet Explorer and Windows Explorer.\n\n\nIf you enable this policy, the search functio

Makes the Customize button in the Search Assistant appear dimmed.\n\n\nThe Search Assistant is a tool that appears in the Search b

Prevents users from adding or removing sites from security zones. A security zone is a group of Web sites with the same security l

Prevents users from changing security zone settings. A security zone is a group of Web sites with the same security level.\n\n\nIf

Applies security zone information to all users of the same computer. A security zone is a group of Web sites with the same security

This policy setting allows you to manage whether Internet Explorer converts Unicode domain names to IDN format (Punycode) befo

This policy setting allows you to manage whether Internet Explorer converts Unicode domain names to IDN format (Punycode) befo

This policy setting allows you to lock the Stop and Refresh buttons next to the Back and Forward buttons.\n\n\nIf you enable this

This policy setting allows you to lock the Stop and Refresh buttons next to the Back and Forward buttons.\n\n\nIf you enable this

This policy setting allows you to set the rate at which Internet Explorer creates new tab processes. There are two algorithms Int

This policy setting allows you to set the rate at which Internet Explorer creates new tab processes. There are two algorithms Int

Designates Shockwave flash as an administrator approved control.\n\n\nIf you enable this policy, this control can be run in secur

This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone nu

This policy setting allows you to manage a list of sites that you want to associate with a particular security zone. These zone nu

This policy setting allows you to manage software channel permissions.\n\n\nIf you enable this policy setting, you can choose th




















This policy setting allows you to manage whether data on HTML forms on pages in the zone may be submitted. Forms sent with SSL




















Restricts the amount of information downloaded for offline viewing.\n\n\nIf you enable this policy, you can set limits to the s

Prevents users from opening the Internet Options dialog box from the Tools menu in Microsoft Internet Explorer.\n\n\nIf you ena





This policy setting prevents users from accessing the Delete Browsing History dialog box.\n\n\nIf you enable this policy setting,

This policy setting prevents users from accessing the Delete Browsing History dialog box.\n\n\nIf you enable this policy setting,

This policy setting allows you to manage whether users have access to Accelerators. \n\n\nIf you enable this policy setting, users w

This policy setting allows you to manage whether users have access to Accelerators. \n\n\nIf you enable this policy setting, users w

This policy setting allows you to turn off the ActiveX opt-in prompt. The ActiveX opt-in prevents Web sites from loading any COM obj

This policy setting allows you to turn off the ActiveX opt-in prompt. The ActiveX opt-in prevents Web sites from loading any COM obj

This policy setting prevents the users from subscribing to a feed or a Web Slice or deleting a subscribed feed or Web Slice.\n\n\

This policy setting prevents the users from subscribing to a feed or a Web Slice or deleting a subscribed feed or Web Slice.\n\n\

This policy setting is used to turn off Automatic Crash Recovery.\n\n\nIf you enable this policy setting, Automatic Crash Recovery

This policy setting is used to turn off Automatic Crash Recovery.\n\n\nIf you enable this policy setting, Automatic Crash Recovery

This policy setting specifies that you want Internet Explorer to automatically resize large images so that they fit in the browser wi

This policy setting controls whether to have background sync for feeds and Web Slices.\n\n\nIf you enable the policy setting, the

This policy setting controls whether to have background sync for feeds and Web Slices.\n\n\nIf you enable the policy setting, the

This policy setting allows checking for updates for Internet Explorer from the specified URL, included by default in Internet Explo

This policy setting prevents the text on the screen from being rendered using the ClearType technology that enhances the readabil

This policy setting prevents the text on the screen from being rendered using the ClearType technology that enhances the readabil

This policy controls the Compatibility View feature, which allows users to fix Web site display problems they may encounter while br

This policy controls the Compatibility View feature, which allows users to fix Web site display problems they may encounter while br

This policy controls the Compatibility View button which appears on the command bar. This button allows users to fix Web site displa

This policy controls the Compatibility View button which appears on the command bar. This button allows users to fix Web site displa

This policy setting allows you to configure the default behavior of new tab creation in Internet Explorer.\n\n\nIf you enable th

This policy setting allows you to configure the default behavior of new tab creation in Internet Explorer.\n\n\nIf you enable th

This policy setting allows you to define the user experience related to pop-up windows and tabbed browsing in Internet Explorer.\

This policy setting allows you to define the user experience related to pop-up windows and tabbed browsing in Internet Explorer.\

This policy setting allows you to configure the behavior of new windows in Internet Explorer.\n\n\nIf you enable this policy setti

This policy setting allows you to configure the behavior of new windows in Internet Explorer.\n\n\nIf you enable this policy setti

This setting specifies the update check interval. The default value is 30 days.\n\n\nIf you enable this policy setting, the user will

This policy setting specifies how you want links on Web pages to be underlined. Select one of the following settings:\nΓÇó To und

This policy setting allows you to manage the crash detection feature of add-on Management.\n\n\nIf you enable this policy setting

This policy setting allows you to manage the crash detection feature of add-on Management.\n\n\nIf you enable this policy setting

This policy setting allows you to manage whether documents can request data across third-party domains embedded in the page.\n\n

This policy setting allows you to manage whether documents can request data across third-party domains embedded in the page.\n\n

This policy setting allows you to turn off the Data Execution Prevention feature for Internet Explorer on Windows Server 2008, W

This policy setting allows you to turn on or turn off Data URI Support. Data URIs allows web developers to encapsulate images and

This policy setting allows you to turn on or turn off Data URI Support. Data URIs allows web developers to encapsulate images and

This policy setting allows you to manage whether users have access to Developer Tools in Internet Explorer.\n\n\nIf you enable thi

This policy setting allows you to manage whether users have access to Developer Tools in Internet Explorer.\n\n\nIf you enable thi

This policy setting allows you to turn off the Help menu in Internet Explorer.\n\n\nIf you enable this policy setting, users will not

This policy setting allows you to turn off the Help menu in Internet Explorer.\n\n\nIf you enable this policy setting, users will not

This policy setting prevents users from having enclosures (file attachments) downloaded from a feed to the user's computer.\n\n

This policy setting prevents users from having enclosures (file attachments) downloaded from a feed to the user's computer.\n\n

This policy setting allows you to turn off support for Transport Layer Security (TLS) 1.0, TLS 1.1, TLS 1.2, Secure Sockets Laye

This policy setting allows you to turn off support for Transport Layer Security (TLS) 1.0, TLS 1.1, TLS 1.2, Secure Sockets Laye

This policy setting allows you to manage whether users have access to the Favorites bar in Internet Explorer.\n\n\nIf you enable this p

This policy setting allows you to manage whether users have access to the Favorites bar in Internet Explorer.\n\n\nIf you enable this p

This policy setting prevents users from having Internet Explorer automatically detect if there is a feed or Web Slice available for

This policy setting prevents users from having Internet Explorer automatically detect if there is a feed or Web Slice available for

This policy setting controls the First Run response that users see on a zone by zone basis. When a user encounters a new control th


This policy setting controls the First Run response that users see on a zone by zone basis. When a user encounters a new control t


















This policy setting specifies whether, when there is a problem connecting with an Internet server, to provide a detailed description

This policy setting let you turn off Inline AutoComplete in Windows Explorer. Inline AutoComplete provides suggestions for what you

This policy setting allows you to disable the InPrivate Browsing feature.\n\n\nInPrivate Browsing prevents Internet Explorer from sto

This policy setting allows you to disable the InPrivate Browsing feature.\n\n\nInPrivate Browsing prevents Internet Explorer from sto

This policy setting allows you to disable InPrivate Filtering.\n\n\nInPrivate Filtering helps users control whether third parties can au

This policy setting allows you to disable InPrivate Filtering.\n\n\nInPrivate Filtering helps users control whether third parties can au

This policy setting allows the user to enable a phishing filter that will warn if the Web site being visited is known for fraudulent

This policy setting allows the user to enable a phishing filter that will warn if the Web site being visited is known for fraudulent

You can allow Pop-ups from specific websites by adding the site to the exceptions list.\n\n\nIf you enable this policy, users will n

You can allow Pop-ups from specific websites by adding the site to the exceptions list.\n\n\nIf you enable this policy, users will n

You can block or allow pop-ups based on three filter levels:\n High ΓÇô Block All Pop-ups\n Medium ΓÇô Block most Automatic

You can block or allow pop-ups based on three filter levels:\n High ΓÇô Block All Pop-ups\n Medium ΓÇô Block most Automatic

This policy setting allows the user to enable the SmartScreen Filter, which will warn if the Web site being visited is known for frau

This policy setting allows the user to enable the SmartScreen Filter, which will warn if the Web site being visited is known for frau

This policy setting specifies if, as you move from one Web page to another, Internet Explorer fades out of the page you are leaving

This policy setting prevents the user from zooming into or out of a page to better see the content.\n\n\nIf you enable this policy

This policy setting prevents the user from zooming into or out of a page to better see the content.\n\n\nIf you enable this policy

This policy setting specifies whether graphical images should be included when pages are displayed.\n\n\nSometimes, pages that con

This policy setting allows you to manage pop-up management functionality in Internet Explorer.\n\n\nIf you enable this policy set

This policy setting allows you to manage pop-up management functionality in Internet Explorer.\n\n\nIf you enable this policy set

This policy setting allows you to manage whether users can access the Print menu.\n\n\nIf you enable this policy setting, the Print m

This policy setting specifies whether you will accept requests from Web sites for Profile Assistant information.\n\n\nIf you enable

This policy setting specifies whether you will accept requests from Web sites for Profile Assistant information.\n\n\nIf you enable

This policy setting allows you to turn off the Quick Tabs functionality in Internet Explorer.\n\n\nIf you enable this policy setting, t

This policy setting allows you to turn off the Quick Tabs functionality in Internet Explorer.\n\n\nIf you enable this policy setting, t

This policy setting allows you to manage whether users have access to the Reopen Last Browsing Session feature in Internet Explor

This policy setting allows you to manage whether users have access to the Reopen Last Browsing Session feature in Internet Explor

This policy setting specifies whether to use UTF-8, a standard that defines characters so they are readable in any language. Usi

This policy setting specifies whether you want Internet Explorer to smooth images, so they appear less jagged when displayed.\n\n\n

This policy setting specifies whether smooth scrolling is used to display content at a predefined speed.\n\n\nIf you enable this poli

This policy setting allows you to turn off suggestions for all user-installed search providers.\n\n\nIf you enable this policy setting,

This policy setting allows you to turn off suggestions for all user-installed search providers.\n\n\nIf you enable this policy setting,

This policy setting allows you to manage whether users have access to Tab Grouping in Internet Explorer.\n\n\nIf you enable this pol

This policy setting allows you to turn off tabbed browsing and related entry points from the Internet Explorer user interface.\n\n\nI

This policy setting allows you to turn off tabbed browsing and related entry points from the Internet Explorer user interface.\n\n\nI

This policy setting allows you to prevent the quick pick menu from displaying when a user clicks in the Search box. \n\n\nIf you ena

This policy setting allows you to prevent the quick pick menu from displaying when a user clicks in the Search box. \n\n\nIf you ena

This AutoComplete feature suggests possible matches when users are entering Web addresses in the browser address bar.\n\n\nIf

This AutoComplete feature suggests possible matches when users are entering Web addresses in the browser address bar.\n\n\nIf

This policy setting prevents users from using Internet Explorer as a feed reader. This setting has no impact on the RSS Platform.\n\n

This policy setting prevents users from using Internet Explorer as a feed reader. This setting has no impact on the RSS Platform.\n\n

This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine when

This policy setting turns off the Security Settings Check feature, which checks Internet Explorer security settings to determine when

The XDomainRequest Object allows Web sites to request data across domains from your browser. This policy setting allows you to

The XDomainRequest Object allows Web sites to request data across domains from your browser. This policy setting allows you to

The toolbar upgrade tool will check to see if incompatible toolbars or browser helper objects are installed when Internet Explorer i

The toolbar upgrade tool will check to see if incompatible toolbars or browser helper objects are installed when Internet Explorer i

Windows Search AutoComplete suggests possible matches when users are entering Web addresses in the browser address bar. This fea

Windows Search AutoComplete suggests possible matches when users are entering Web addresses in the browser address bar. This fea

This policy setting enables intranet mapping rules to be applied automatically when the computer belongs to a domain.\n\n\nIf you e

This policy setting enables intranet mapping rules to be applied automatically when the computer belongs to a domain.\n\n\nIf you e

This policy setting allows Internet Explorer to be launched automatically to complete the signup process after the branding is com

This policy setting allows users to have their feeds authenticated using the Basic authentication scheme over an unencrypted HT

This policy setting allows users to have their feeds authenticated using the Basic authentication scheme over an unencrypted HT

This policy setting allows you to turn Caret Browsing on or off. Caret Browsing allows users to navigate to a Web page by moving th

This policy setting allows you to turn Caret Browsing on or off. Caret Browsing allows users to navigate to a Web page by moving th

This policy setting logs information that is blocked by new features in Internet Explorer. The logged data is displayed in the Windo

This policy setting logs information that is blocked by new features in Internet Explorer. The logged data is displayed in the Windo

This policy controls whether or not the Cross-Site Scripting (XSS) Filter will detect and prevent cross-site script injection into Web si




















This policy setting allows an Information bar notification to be shown to the user when intranet content is loaded and the intranet

This policy setting allows an Information bar notification to be shown to the user when intranet content is loaded and the intranet

This policy setting lets you turn on inline AutoComplete for Web addresses. The AutoComplete feature provides suggestions for what

Compatibility View determines how Internet Explorer identifies itself to a Web server and determines whether content is rendered i

Compatibility View determines how Internet Explorer identifies itself to a Web server and determines whether content is rendered i

This policy controls how Internet Explorer displays local intranet content. Intranet content is defined as any Web page that belongs

This policy controls how Internet Explorer displays local intranet content. Intranet content is defined as any Web page that belongs

This policy setting allows you to turn on or turn off the legacy "File, Edit, View, etc. ..." menus in Internet Explorer.\n\n\nIf you e

This policy setting allows you to turn on or turn off the legacy "File, Edit, View, etc. ..." menus in Internet Explorer.\n\n\nIf you e

Protected mode protects Internet Explorer from exploited vulnerabilities by reducing the locations Internet Explorer can write to in t




















This policy setting allows you to turn on your script debugger, if one is installed. Script debuggers are used by Web site develope

This policy setting controls the Suggested Sites feature, which recommends sites based on the userΓÇÖs browsing activity. Suggeste

This AutoComplete feature can remember and suggest User names and passwords on Forms.\n\n\nIf you enable this setting, the u

This policy setting specifies whether to display script errors when a page does not appear properly because of problems with its scr

This policy setting is used to make hyperlinks change color when the mouse pointer pauses on them.\n\n\nIf you enable this policy set

This policy setting determines if the Internet Connection Wizard was completed. If it was not completed, it launches the Internet

This policy setting is used to turn on the certificate address mismatch security warning. When this setting is turned on, users ar

This policy setting is used to turn on the certificate address mismatch security warning. When this setting is turned on, users ar

Specifies that Automatic Detection will be used to configure dial-up settings for users.\n\n\nAutomatic Detection uses a DHCP (Dyna

This policy setting allows you to manage whether Internet Explorer will use Hypertext Transfer Protocol (HTTP) 1.1. \n\n\nIf you ena

This policy setting allows you to manage whether Internet Explorer will use Hypertext Transfer Protocol (HTTP) 1.1. \n\n\nIf you ena

This policy setting allows you to manage whether Internet Explorer will use Hypertext Transfer Protocol (HTTP) 1.1 through proxy c

This policy setting allows you to manage whether Internet Explorer will use Hypertext Transfer Protocol (HTTP) 1.1 through proxy c

This policy setting allows you to make the icons for the command buttons bigger (20x20 pixels).\n\n\nIf you enable this setting, th

This policy setting allows you to make the icons for the command buttons bigger (20x20 pixels).\n\n\nIf you enable this setting, th

This policy setting restricts the list of Accelerators that users can access only to the set deployed through Group Policy. \n\n\nI

This policy setting restricts the list of Accelerators that users can access only to the set deployed through Group Policy. \n\n\nI

This policy setting allows you to add specific sites that must be viewed in Internet Explorer 7 Compatibility View. \n\n\nIf you enab

This policy setting allows you to add specific sites that must be viewed in Internet Explorer 7 Compatibility View. \n\n\nIf you enab

This policy setting allows you to manage whether unwanted pop-up windows appear. Pop-up windows that are opened when the end u




















This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content.\n\n\nIf you enable this polic




















This policy setting allows you to manage whether Internet Explorer uses UTF-8 for mailto links.\n\n\nIf you enable this policy set

This policy setting allows you to manage whether Internet Explorer uses UTF-8 for mailto links.\n\n\nIf you enable this policy set

This policy setting allows you to manage the preservation of information in the browser's history, in favorites, in an XML store, or




















Prevents users from displaying the browser in full-screen (kiosk) mode, without the standard toolbar.\n\n\nIf you enable this poli

Prevents users from viewing the HTML source of Web pages by clicking the Source command on the View menu.\n\n\nIf you enable

This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into

This policy setting allows you to manage whether Web sites from less privileged zones, such as Internet sites, can navigate into thi







This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into t










This policy setting allows you to manage whether Web sites from less privileged zones, such as Restricted Sites, can navigate into t


These are browser-hosted, ClickOnce-deployed applications built using WinFX. These applications execute in a security sandbox and




















These are files authored using the XML Paper Specification document format that contain a fixed-layout representation of its paginat




















Turns off the handwriting recognition error reporting tool.\n\n\nThe handwriting recognition error reporting tool enables users to

Turns off the handwriting recognition error reporting tool.\n\n\nThe handwriting recognition error reporting tool enables users to

Turns off the automatic learning component of handwriting recognition personalization. \n\n\nAutomatic learning enables the collec

Turns off the automatic learning component of handwriting recognition personalization. \n\n\nAutomatic learning enables the collec

If enabled then new targets may not be manually configured by entering the target name and target portal; already discovered t

If enabled then only those sessions that are established via a persistent login will be established and no new persistent logins m

If enabled then do not allow the initiator CHAP secret to be changed. If disabled then the initiator CHAP secret may be changed.

If enabled then do not allow the initiator iqn name to be changed. If disabled then the initiator iqn name may be changed.

If enabled then only those connections that are configured for IPSec may be established. If disabled then connections that are c

If enabled then discovered targets may not be manually configured. If disabled then discovered targets may be manually configu

If enabled then new iSNS servers may not be added and thus new targets discovered via those iSNS servers; existing iSNS ser

If enabled then new target portals may not be added and thus new targets discovered on those portals; existing target portals m

If enabled then only those sessions that are configured for mutual CHAP may be established. If disabled then sessions that ar

If enabled then only those sessions that are configured for one-way CHAP may be established. If disabled then sessions that ar

This policy setting controls whether the domain controller provides information about previous logons to client computers.\n\n\

This policy setting defines the list of trusting forests that the Key Distribution Center (KDC) searches when attempting to resolve

This policy setting allows you to specify which DNS host names and which DNS suffixes are mapped to a Kerberos realm.\n\n\nIf y

This policy setting configures the Kerberos client so that it can authenticate with interoperable Kerberos V5 realms, as defined b

This policy setting controls the Kerberos client's behavior in validating the KDC certificate. \n \nIf you enable this polic

When an application attempts to make a remote procedure call (RPC) to this server with a NULL value for the service principal na

This policy setting defines the list of trusting forests that the Kerberos client searches when attempting to resolve two-part servic

This policy enables a hash generation service to generate hashes for data stored in shared folders, and then provide these hashes

This policy setting determines whether Diagnostic Policy Service (DPS) will diagnose memory leak problems. If you disable this po

This policy setting changes the operational behavior of the Mapper I/O network protocol driver.\n\n\nLLTDIO allows a computer to

This policy setting changes the operational behavior of the Responder network protocol driver.\n\n\nThe Responder allows a comput

This setting forces the user to log on to the computer using the classic logon screen. By default, a workgroup is set to use the

Ignores Windows Logon Background.\n\n\nThis policy setting may be used to make Windows give preference to a custom logon back

\n\nThis policy setting determines whether Group Policy processing is synchronous (that is, whether computers wait for the network

Ignores the customized run list.\n\n\nYou can create a customized list of additional programs and documents that the system start

Ignores the customized run list.\n\n\nYou can create a customized list of additional programs and documents that the system start

Ignores customized run-once lists.\n\n\nYou can create a customized list of additional programs and documents that are started a

Ignores customized run-once lists.\n\n\nYou can create a customized list of additional programs and documents that are started a

Supresses the welcome screen.\n\n\nThis setting hides the welcome screen that is displayed on Windows 2000 Professional each ti

Supresses the welcome screen.\n\n\nThis setting hides the welcome screen that is displayed on Windows 2000 Professional each ti

By enabling the policy, Administrators hide the Switch user button in the Logon UI, the Start menu and the Task Manager.

Suppresses system status messages.\n\n\nIf you enable this setting, the system does not display a message reminding users to wai

Specifies additional programs or documents that Windows starts automatically when a user logs on to the system.\n\n\nTo specify v

Specifies additional programs or documents that Windows starts automatically when a user logs on to the system.\n\n\nTo specify v

Turn off the Windows Startup sound and prevent its customization in the Sound item of Control Panel.\n\n\nThe Microsoft Windows St

Directs the system to display highly detailed status messages.\n\n\nIf you enable this setting, the system displays status messages

Specifies whether Windows Media Center can run.\n\n\nIf you enable this setting, Windows Media Center will not run.\n\n\nIf you

Specifies whether Windows Media Center can run.\n\n\nIf you enable this setting, Windows Media Center will not run.\n\n\nIf you

Permits or prohibits use of this snap-in.\n\n\nIf you enable this setting, the snap-in is permitted. If you disable the setting, the sn



Prevents users from entering author mode.\n\n\nThis setting prevents users from opening the Microsoft Management Console (MMC

Lets you selectively permit or prohibit the use of Microsoft Management Console (MMC) snap-ins.\n\n\n-- If you enable this setting,






































Permits or prohibits use of the Group Policy tab in property sheets for the Active Directory Users and Computers and Active Directory














































































This policy setting turns off Windows Mobility Center.\n\n\nIf you enable this policy setting, the user is unable to invoke Windows

This policy setting turns off Windows Mobility Center.\n\n\nIf you enable this policy setting, the user is unable to invoke Windows

This policy setting turns off Windows presentation settings.\n\n\nIf you enable this policy setting, Windows presentation settings

This policy setting turns off Windows presentation settings.\n\n\nIf you enable this policy setting, Windows presentation settings

Determines the execution level for Microsoft Support Diagnostic Tool.\n\n\nMicrosoft Support Diagnostic Tool (MSDT) gathers diagno

Restricts the tool download policy for Microsoft Support Diagnostic Tool.\n\n\nMicrosoft Support Diagnostic Tool (MSDT) gathers d

Microsoft Support Diagnostic Tool (MSDT) gathers diagnostic data for analysis by support professionals.\n\n\nIf you leave this poli

Allows Remote Desktop Services administrators to install and configure programs remotely.\n\n\nBy default, system administrato

Directs Windows Installer to use system permissions when it installs any program on the system.\n\n\nThis setting extends elevated

Directs Windows Installer to use system permissions when it installs any program on the system.\n\n\nThis setting extends elevated

This policy controls the percentage of disk space available to the Windows Installer baseline file cache.\n\n\nThe Windows Installe

Saves copies of transform files in a secure location on the local computer.\n\n\nTransform files consist of instructions to modify o

Allows Web-based programs to install software on the computer without notifying the user.\n\n\nBy default, when a script hosted b

The MsiLogging property in an installation package can be used to enable automatic logging of all install operations for the packa

Disables or restricts the use of Windows Installer.\n\n\nThis setting can prevent users from installing software on their systems

Permits users to change installation options that typically are available only to system administrators.\n\n\nThis setting bypasses

Allows users to search for installation files during privileged installations.\n\n\nThis setting enables the Browse button in the "

Allows users to upgrade programs during privileged installations.\n\n\nThis setting permits all users to install patches, even whe

Allows users to install programs from removable media, such as floppy disks and CD-ROMs, during privileged installations.\n\n\nT

This setting causes the Windows Installer to enforce strict rules for component upgrades - setting this may cause some updates t

Specifies the types of events that Windows Installer records in its transaction log for each installation. The log, Msi.log, appears

Prevents users from installing programs from removable media.\n\n\nIf a user tries to install a program from removable media, s

This setting controls the ability to turn off all patch optimizations. \n\n\nIf you turn on this policy setting (set to 1), all Patch O

This setting controls the ability of non-administrators to install updates that have been digitally signed by the application vendor

Prevents users from using Windows Installer to install patches.\n\n\nPatches are updates or upgrades that replace only those prog

This setting controls the ability for users or administrators to remove Windows Installer based updates. \n\n\nThis setting shou

Prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation.\n\

Prohibits Windows Installer from generating and saving the files it needs to reverse an interrupted or unsuccessful installation.\n\

The Restart Manager API can eliminate or reduce the number of system restarts that are required to complete an installation or upd

This setting allows you to configure user installs. To configure this setting, set it to enabled and use the drop-down list to select t

Prevents users from searching for installation files when they add features or components to an installed program.\n\n\nThis settin

Specifies the order in which Windows Installer searches for installation files.\n\n\nBy default, the Windows Installer searches the

System Restore enables users, in the event of a problem, to restore their computers to a previous state without losing personal dat

This policy setting allows you to configure the recovery behavior for corrupted MSI files to one of three states:\n\n\nPrompt for R

This policy setting allows the Network Access Protection (NAP) client to support the Windows XP version of the 802.1x Enforcemen

This is the expected address of the host name used as for the DNS probe. Successful resolution of the host name to this address

This is the host name of a PC known to be on the corporate network. Successful resolution of this host name to the expected add

This is the list of IPv6 corporate site prefixes that should be monitored for corporate connectivity. Reachability of addresses with

This is the URL of the corporate website that will be used to perform an active probe against.

This is the HTTPS URL of the corporate website that will be used to determine the current domain location i.e. inside or outside cor

This setting controls whether the Net Logon service will allow the use of older cryptography algorithms that are used in Window

Determines whether domain controllers (DC) will dynamically register DC Locator site-specific SRV records for the closest sites wh

Defines whether a domain controller (DC) should attempt to verify with the PDC the password provided by a client if the DC faile

Determines which Domain Controller (DC) Locator DNS records are not registered by the Netlogon service.\n\n\nTo enable this

This policy setting allows you to control the processing of incoming mailslot messages by a local domain controller (DC).\n\n\

The Domain Controller (DC) Locator APIs return IP address of the DC with the other part of the information. Before the support o

Determines if Dynamic Registration of the domain controller (DC) locator DNS resource records is enabled. These DNS records are

Specifies the additional time for the computer to wait for the domain controllerΓÇÖs (DC) response when logging on to the network.

When applications performing periodic searches for domain controllers (DC) are unable to find a DC, the value set in this setting

The Domain Controller Locator (DC Locator) service is used by clients to find domain controllers for their Active Directory domai

When applications performing periodic searches for domain controllers (DC) are unable to find a DC, the value set in this setting

Specifies whether the computers to which this setting is applied attempt DNS name resolution of a single-label domain names.\n\n\

Specifies the level of debug output for the Net Logon service.\n\n\nThe Net Logon service outputs debug information to the log fil

When applications performing periodic searches for Domain Controllers (DCs) are unable to find a DC, the value set in this setting

Specifies the maximum size in bytes of the log file netlogon.log in the directory %windir%\debug when logging is enabled.\n\n\nBy d

Specifies the amount of time (in seconds) the DC locator remembers that a domain controller (DC) could not be found in a domain. Wh

This setting controls whether or not the Netlogon share created by the Net Logon service on a domain controller (DC) should suppor

Determines when a successful DC cache entry is refreshed. This setting is applied to caller programs that periodically attempt to l

Determines when a successful DC cache entry is refreshed. This setting is applied to caller programs that do not periodically at

Specifies the Priority field in the SRV resource records registered by domain controllers (DC) to which this setting is applied. T

Specifies the Refresh Interval of the domain controller (DC) Locator DNS resource records for DCs to which this setting is appli

Determines the interval at which Netlogon performs the following scavenging operations:\n\n\n- Checks if a password on a secure

Specifies the Active Directory site to which computers belong.\n\n\nAn Active Directory site is one or more well-connected TCP/IP s

Specifies the sites for which the domain controllers (DC) housing application directory partition should register the site-specifi

Specifies the sites for which the domain controllers (DC) register the site-specific DC Locator DNS SRV resource records. These

Specifies the sites for which the global catalogs (GC) should register site-specific GC locator DNS SRV resource records. These r

This setting controls whether or not the Sysvol share created by the Net Logon service on a domain controller (DC) should support

The Domain Controller Locator (DC Locator) service is used by clients to find domain controllers for their Active Directory domain

Specifies the value for the Time-To-Live (TTL) field in Net Logon registered SRV resource records. These DNS records are dynamica

Specifies the Weight field in the SRV resource records registered by the domain controllers (DC) to which this setting is applied

Determines whether a user can view and change the properties of remote access connections that are available to all users of the

Determines whether users can delete all user remote access connections.\n\n\nTo create an all-user remote access connection, on

Determines whether users can enable/disable LAN connections.\n\n\nIf you enable this setting, the Enable and Disable options for

Determines whether nonadministrators can rename all-user remote access connections.\n\n\nTo create an all-user connection, on th

Determines whether nonadministrators can rename a LAN connection.\n\n\nIf you enable this setting, the Rename option is enabled

Determines whether users can rename LAN or all user remote access connections.\n\n\nIf you enable this setting, the Rename opti

Specifies whether or not the "local access only" network icon will be shown.\n\n\nWhen enabled, the icon for Internet access will

Determines whether settings that existed in Windows 2000 Server family will apply to Administrators.\n\n\nThe set of Network Co

Determines whether users can change the properties of a LAN connection.\n\n\nThis setting determines whether the Properties menu

Determines whether Administrators and Network Configuration Operators can change the properties of components used by a LAN con

Determines whether users can view and change the properties of components used by a private or all-user remote access connection

Determines whether the Advanced Settings item on the Advanced menu in Network Connections is enabled for administrators.\n\n\nTh

Determines whether users can use the New Connection Wizard, which creates new network connections.\n\n\nIf you enable this sett

Determines whether the Remote Acccess Preferences item on the Advanced menu in Network Connections folder is enabled.\n\n\nThe

Determines whether administrators can add and remove network components for a LAN or remote access connection. This setting has

Determines whether users can view and change the properties of their private remote access connections.\n\n\nPrivate connections

Determines whether users can connect and disconnect remote access connections.\n\n\nIf you enable this setting (and enable the "E

Determines whether users can delete remote access connections.\n\n\nIf you enable this setting (and enable the "Enable Network C

Determines whether administrators can enable and disable the components used by LAN connections.\n\n\nIf you enable this settin

Determines whether a user can install and configure the Network Bridge.\n\n\nImportant: This settings is location aware. It onl

Determines whether users can rename their private remote access connections.\n\n\nPrivate connections are those that are availabl

Determines whether users can configure advanced TCP/IP settings.\n\n\nIf you enable this setting (and enable the "Enable Networ

Prohibits use of Internet Connection Firewall on your DNS domain network.\n\n\nDetermines whether users can enable the Internet

Determines whether administrators can enable and configure the Internet Connection Sharing (ICS) feature of an Internet connec

Determines whether users can view the status for an active connection.\n\n\nConnection status is available from the connection sta

This policy setting determines whether to require domain users to elevate when setting a network's location.\n\n\nIf you enable thi

This policy setting determines whether a remote client computer routes Internet traffic through the internal network or whether th

This policy setting allows you to manage whether notifications are shown to the user when a DHCP-configured connection is unable

This policy setting allows you to select the TCP port the Network Projector will use to send packets. If you leave the 0, the operati

Disables the Connect to a Network Projector wizard so that users cannot connect to a network projector.\n\n\nIf you enable this po

Disables the Connect to a Network Projector wizard so that users cannot connect to a network projector.\n\n\nIf you enable this po

Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files.\n\n\nT

Determines whether network files remain available if the computer is suddenly disconnected from the server hosting the files.\n\n\nT

This policy setting lists network files and folders that are always available for offline use. This ensures that the the specified fil

This policy setting lists network files and folders that are always available for offline use. This ensures that the the specified fil

Determines whether the Offline Files feature is enabled.\n\n\nThis setting also disables the "Enable Offline Files" option on the

Deletes local copies of the user's offline files when the user logs off.\n\n\nThis setting specifies that automatically and manually

This is a machine-specific setting which applies to any user who logs onto the specified machine while this policy is in effect.\n

Configures the threshold value at which Offline Files considers a network connection to be "slow". Any network speed below this va

This policy setting enables computers running Windows Vista or Windows Server 2008 to use the slow-link mode of Offline Files (i

Limits the percentage of the computer's disk space that can be used to store automatically cached offline files.\n\n\nThis setting

Enabling this policy optimizes subsequent reads to network files by a user or an application. This is done by caching reads to rem

This setting determines whether offline files are encrypted.\n\n\nOffline files reside on a user's hard drive, not the network, and

Determines which events the Offline Files feature records in the event log.\n\n\nOffline Files records events in the Application l

Determines which events the Offline Files feature records in the event log.\n\n\nOffline Files records events in the Application l

This policy enables administrators to exclude certain file types from being made available offline. \n\n\nYou need to specify file ex

Lists types of files that cannot be used offline.\n\n\nThis setting lets you exclude certain types of files from automatic and manu

Determines how long the first reminder balloon for a network status change is displayed.\n\n\nReminder balloons appear when the u

Determines how long the first reminder balloon for a network status change is displayed.\n\n\nReminder balloons appear when the u

This policy limits the amount of the computer's disk space that can be used to store offline files.\n\n\nUsing this setting you can c

Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the defa

Determines how computers respond when they are disconnected from particular offline file servers. This setting overrides the defa

Disables the Offline Files folder.\n\n\nThis setting disables the "View Files" button on the Offline Files tab. As a result, users c

Disables the Offline Files folder.\n\n\nThis setting disables the "View Files" button on the Offline Files tab. As a result, users c

This policy setting allows you to manage a list of files or folders for which you wish to prohibit the 'Make Available Offline' option

This policy setting allows you to manage a list of files or folders for which you wish to prohibit the 'Make Available Offline' option

Prevents users from enabling, disabling, or changing the configuration of Offline Files.\n\n\nThis setting removes the Offline File

Prevents users from enabling, disabling, or changing the configuration of Offline Files.\n\n\nThis setting removes the Offline File

Determines how often reminder balloon updates appear.\n\n\nIf you enable this setting, you can select how often reminder balloons

Determines how often reminder balloon updates appear.\n\n\nIf you enable this setting, you can select how often reminder balloons

Determines how long updated reminder balloons are displayed.\n\n\nReminder balloons appear when the user's connection to a netwo

Determines how long updated reminder balloons are displayed.\n\n\nReminder balloons appear when the user's connection to a netwo

Prevents users from making network files and folders available offline.\n\n\nThis setting removes the "Make Available Offline" op

Prevents users from making network files and folders available offline.\n\n\nThis setting removes the "Make Available Offline" op

Makes subfolders available offline whenever their parent folder is made available offline.\n\n\nThis setting automatically extends th

Determines whether offline files are fully synchronized when users log off.\n\n\nThis setting also disables the "Synchronize all off

Determines whether offline files are fully synchronized when users log off.\n\n\nThis setting also disables the "Synchronize all off

Determines whether offline files are fully synchronized when users log on.\n\n\nThis setting also disables the "Synchronize all off

Determines whether offline files are fully synchronized when users log on.\n\n\nThis setting also disables the "Synchronize all off

Determines whether offline files are synchonized before a computer is suspended.\n\n\nIf you enable this setting, offline files ar

Determines whether offline files are synchonized before a computer is suspended.\n\n\nIf you enable this setting, offline files ar

Hides or displays reminder balloons, and prevents users from changing the setting.\n\n\nReminder balloons appear above the Offline

Hides or displays reminder balloons, and prevents users from changing the setting.\n\n\nReminder balloons appear above the Offline

This policy setting allows you to turn on economical application of administratively assigned Offline Files.\n\n\nIf you enable or do

By default, when a Peer Group is created that allows for password-authentication (or the password for such a Group is changed), P

This policy setting limits a node to resolving, but not publishing, names in a specific Peer Name Resolution Protocol (PNRP) clo



This setting sets the seed server for the global cloud to a specified node in the enterprise. The Peer Name Resolution Protocol (P

This setting sets the seed server for the link local cloud to a specified node in the enterprise.\n\n\nThe Peer Name Resolution Pro

This setting sets the seed server for the site local cloud to a specified node in the enterprise.\n\n\nThe Peer Name Resolution Pr

This setting turns off Microsoft Peer-to-Peer Networking Services in its entirety, and will cause all dependent applications to stop w

This setting disables PNRP protocol from advertising the computer or from searching other computers on the local subnet in the gl

This setting disables PNRP protocol from advertising the computer or from searching other computers on the local subnet in the lin

This setting disables PNRP protocol from advertising the computer or from searching other computers on the local subnet in the sit

This policy setting enables or disables PNRP cloud creation.\n\n\nPNRP is a distributed name resolution protocol allowing Inter



Configure the Parental Controls feature.\n\n\nIf you turn on this setting, the Parental Controls control panel will be visible on a d

This policy setting determines whether the Program Compatibility Assistant (PCA) will diagnose DLL load or COM object creation f

This policy setting determines whether the Program Compatibility Assistant (PCA) will diagnose DLL load failures in programs. \n

This policy setting configures the Program Compatibility Assistant (PCA) to diagnose failures with application installations. \n\n\

This policy setting determines whether the Program Compatibility Assistant (PCA) will diagnose failures with application installers

This policy setting configures the Program Compatibility Assistant (PCA) to diagnose failures with programs under User Account Co

This policy setting determines whether the Program Compatibility Assistant (PCA) will diagnose drivers blocked due to compatibility

This policy setting changes the default round trip network latency value above which network files are cached by client computers

This policy setting specifies whether the client computer should use the Distributed Cache mode. This BranchCache mode enables a

This policy setting specifies whether the client computer should use the Hosted Cache mode, and if so, what the address of the

This policy setting changes the default percentage of total disk space to dedicate to caching retrieved content with BranchCache. Th

This policy setting specifies whether BranchCache is enabled on the client computer. BranchCache reduces the utilization of the

Turns off Tablet PC Pen Training.\n\n\nIf you enable this policy setting, users cannot open Tablet PC Pen Training.\n\n\nIf you di

Turns off Tablet PC Pen Training.\n\n\nIf you enable this policy setting, users cannot open Tablet PC Pen Training.\n\n\nIf you di

Removes access to the performance center control panel OEM and Microsoft branding links.\n\n\nIf you enable this setting, the OEM

Removes access to the performance center control panel OEM and Microsoft branding links.\n\n\nIf you enable this setting, the OEM

Removes access to the performance center control panel page. \n\n\nIf you enable this setting, some settings within the performance

Removes access to the performance center control panel page. \n\n\nIf you enable this setting, some settings within the performance

Removes access to the performance center control panel solutions to performance problems.\n\n\nIf you enable this setting, the sol

Removes access to the performance center control panel solutions to performance problems.\n\n\nIf you enable this setting, the sol

Determines the execution level for Windows Boot Performance Diagnostics.\n\n\nIf you enable this policy setting, you must select

Determines the execution level for Windows Standby/Resume Performance Diagnostics.\n\n\nIf you enable this policy setting, you m

Determines the execution level for Windows System Responsiveness Diagnostics.\n\n\nIf you enable this policy setting, you must s

Determines the execution level for Windows Shutdown Performance Diagnostics.\n\n\nIf you enable this policy setting, you must se

This policy setting specifies whether to enable or disable tracking of responsiveness events.\n\n\nIf you enable this policy set

Allow applications and services to prevent automatic sleep.\n \nIf you enable this policy setting, any application, service or

Allow applications and services to prevent automatic sleep.\n \nIf you enable this policy setting, any application, service or

Allow Automatic Sleep with Open Network Files.\n \nIf you enable this policy setting, the computer will automatically sleep whe

Allow Automatic Sleep with Open Network Files.\n \nIf you enable this policy setting, the computer will automatically sleep whe

Dictates whether or not Windows is allowed to use standby states when sleeping the computer. \n \nWhen this policy is enab

Dictates whether or not Windows is allowed to use standby states when sleeping the computer. \n \nWhen this policy is enab

Specifies the action that Windows takes when battery capacity reaches the critical battery notification level.\n\n\nPossible actions

Specifies the percentage of battery capacity remaining that triggers the critical battery notification action.\n\n\nIf you enable this p

This setting allows you to configure whether power is automatically turned off when Windows shutdown completes. This setting

Specifies the action that Windows takes when battery capacity reaches the low battery notification level.\n\n\nPossible actions inc

Specifies the percentage of battery capacity remaining that triggers the low battery notification action.\n\n\nIf you enable this poli

This settings allows you to configure client computers to always lock when resuming from a hibernate or suspend.\n\n\nIf you enabl

Specify the period of inactivity before Windows automatically reduces brightness of the display. \n \nIf you enable this poli

Specify the period of inactivity before Windows automatically reduces brightness of the display. \n \nIf you enable this poli

Specifies whether or not the user is prompted for a password when the system resumes from sleep. \n\n\nIf you enable this policy

Specifies whether or not the user is prompted for a password when the system resumes from sleep. \n\n\nIf you enable this policy

Specify the percentage of battery capacity remaining that triggers the reserve power mode.\n \nIf you enable this policy setting

Specifies the active power plan from a list of default Windows power plans. To specify a custom power plan, use the Custom Active

Specifies the action that Windows takes when a user closes the lid on a mobile PC.\n\n\nPossible actions include:\n\n\n-Take no ac

Specifies the action that Windows takes when a user closes the lid on a mobile PC.\n\n\nPossible actions include:\n\n\n-Take no ac

Specifies the action that Windows takes when a user presses the power button.\n\n\nPossible actions include:\n\n\n-Take no action\

Specifies the action that Windows takes when a user presses the power button.\n\n\nPossible actions include:\n\n\n-Take no action\

Specifies the action that Windows takes when a user presses the sleep button.\n\n\nPossible actions include:\n\n\n-Take no action\

Specifies the action that Windows takes when a user presses the sleep button.\n\n\nPossible actions include:\n\n\n-Take no action\

Specifies the action that Windows takes when a user presses the user interface sleep button.\n\n\nPossible actions include:\n\n\n-

Specifies the action that Windows takes when a user presses the user interface sleep button.\n\n\nPossible actions include:\n\n\n-

Specifies the active power plan from a specified power planΓÇÖs GUID. The GUID for a custom power plan GUID can be retrieve

Specify the brightness of the display when Windows automatically reduces brightness of the display.\n \nIf you enable this pol

Specify the brightness of the display when Windows automatically reduces brightness of the display.\n \nIf you enable this pol

Specifies the period of inactivity before Windows transitions the system to hibernate.\n\n\nIf you enable this policy setting, you

Specifies the period of inactivity before Windows transitions the system to hibernate.\n\n\nIf you enable this policy setting, you

Specifies the period of inactivity before Windows transitions the system to sleep.\n\n\nIf you enable this policy setting, you must

Specifies the period of inactivity before Windows transitions the system to sleep.\n\n\nIf you enable this policy setting, you must

Specify the period of inactivity before Windows transitions to sleep automatically when a user is not present at the computer.\n

Specify the period of inactivity before Windows transitions to sleep automatically when a user is not present at the computer.\n

Manages how Windows controls the setting that specifies how long a computer must be inactive before Windows turns off the com

Manages how Windows controls the setting that specifies how long a computer must be inactive before Windows turns off the com

Disables Hybrid Sleep.\n\n\nIf you enable this policy setting, a hiberfile is not generated when the system transitions to sleep (St

Disables Hybrid Sleep.\n\n\nIf you enable this policy setting, a hiberfile is not generated when the system transitions to sleep (St

Disables a user notification when the battery capacity remaining equals the low battery notification level.\n\n\nIf you enable this po

Specifies the period of inactivity before Windows turns off the display.\n\n\nIf you enable this policy, you must provide a value,

Specifies the period of inactivity before Windows turns off the display.\n\n\nIf you enable this policy, you must provide a value,

Specifies the period of inactivity before Windows turns off the hard disk.\n\n\nIf you enable this policy, you must provide a value

Specifies the period of inactivity before Windows turns off the hard disk.\n\n\nIf you enable this policy, you must provide a value

Specify if Windows should enable the desktop background slideshow.\n \nIf you enable this policy setting, desktop background

Specify if Windows should enable the desktop background slideshow.\n \nIf you enable this policy setting, desktop background

Enables applications and services to prevent the system from sleeping.\n\n\nIf you enable this policy setting, an application or se

Enables applications and services to prevent the system from sleeping.\n\n\nIf you enable this policy setting, an application or se

This policy setting lets you hide the list of previous versions of files that are on local disks. The previous versions could come from t

This policy setting lets you hide the list of previous versions of files that are on local disks. The previous versions could come from t

This policy setting lets you hide the list of previous versions of files that are on file shares. The previous versions come from the on-d

This policy setting lets you hide the list of previous versions of files that are on file shares. The previous versions come from the on-d

This setting lets you hide entries in the list of previous versions of a file in which the previous version is located on backup med

This setting lets you hide entries in the list of previous versions of a file in which the previous version is located on backup med

This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous version


This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous versi

This setting lets you suppress the Restore button in the previous versions property page when the user has selected a previous versi



This policy sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on a managed

This policy sets the maximum number of printers (of each type) that the Add Printer wizard will display on a computer on an unmanag

This policy controls whether the print spooler will accept client connections.\n\n\nWhen the policy is unconfigured, the spooler wil

Determines whether the computer's shared printers can be published in Active Directory.\n\n\nIf you enable this setting or do not conf

Determines whether the domain controller can prune (delete from Active Directory) the printers published by this computer.\n\n\nB

When printing through a print server, determines whether the print spooler on the client will process print jobs itself, or pass the

Determines whether the Add Printer Wizard automatically publishes the computer's shared printers in Active Directory.\n\n\nIf you e

Adds a link to an Internet or intranet Web page to the Add Printer Wizard.\n\n\nYou can use this setting to direct users to a Web

Allows users to use the Add Printer Wizard to search the network for shared printers.\n\n\nIf you enable this setting or do not co

Directs the system to periodically verify that the printers published by this computer still appear in Active Directory. This setting a

Specifies the default location criteria used when searching for printers.\n\n\nThis setting is a component of the Location Tracking

Adds a customized Web page link to the Printers folder.\n\n\nBy default, the Printers folder includes a link to the Microsoft Sup

Specifies the Active Directory location where searches for printers begin.\n\n\nThe Add Printer Wizard gives users the option of sea

Specifies how often the pruning service on a domain controller contacts computers to verify that their printers are operational.\n

Sets the priority of the pruning thread.\n\n\nThe pruning thread, which runs only on domain controllers, deletes printer objects fr

Specifies how many times the pruning service on a domain controller repeats its attempt to contact a computer before pruning the c

Determines whether printers using kernel-mode drivers may be installed on the local computer. Kernel-mode drivers have access to

\n\nThis policy setting determines whether the print spooler will execute print drivers in an isolated or separate process. When print

This policy setting allows you to manage where client computers search for Point and Printer drivers.\n\n\nIf you enable this poli

Specifies whether or not to log events when the pruning service on a domain controller attempts to contact a computer before pruning

This policy restricts clients computers to use package point and print only.\n\n\nIf this setting is enabled, users will only be able

This policy restricts clients computers to use package point and print only.\n\n\nIf this setting is enabled, users will only be able

\n\nThis policy setting determines whether the print spooler will override the Driver Isolation compatibility reported by the print dri

Restricts package point and print to approved servers.\n\n\nThis policy setting restricts package point and print connections to ap

Restricts package point and print to approved servers.\n\n\nThis policy setting restricts package point and print connections to ap

\n\n\n\nThis policy setting controls the client Point and Print behavior, including the security prompts for Windows Vista comp

\n\n\n\nThis policy setting controls the client Point and Print behavior, including the security prompts for Windows Vista comp

Enables the physical Location Tracking setting for Windows printers.\n\n\nUse Location Tracking to design a location scheme for

Prevents users from using familiar methods to add local and network printers.\n\n\nThis setting removes the Add Printer option from

Prevents users from deleting local and network printers.\n\n\nIf a user tries to delete a printer, such as by using the Delete opti

Announces the presence of shared printers to print browse master servers for the domain.\n\n\nOn domains with Active Directory, s

Determines whether the pruning service on a domain controller prunes printer objects that are not automatically republished when

Determines whether Internet printing is activated on this server.\n\n\nInternet printing lets you display printers on Web pages so t

Prevents users from viewing or installing published programs from the network. \n\n\nThis setting prevents users from accessing t

This setting prevents users from accessing "Installed Updates" page from the "View installed updates" task.\n\n\n"Installed Update

This setting prevents users from accessing "Programs and Features" to view, uninstall, change, or repair programs that are curre

This setting removes the Set Program Access and Defaults page from the Programs Control Panel. As a result, users cannot view

This setting prevents users from accessing the "Turn Windows features on or off" task from the Programs Control Panel in Categor

This setting prevents users from access the "Get new programs from Windows Marketplace" task from the Programs Control Panel in

This setting prevents users from using the Programs Control Panel in Category View and Programs and Features in Classic View.\n

This policy setting allows a Password Synchronization administrator to configure the interval, in seconds, between synchronization ret

This policy setting allows an administrator to set the number of password synchronization retries that Password Synchronization can

This policy setting allows an administrator to turn on extensive logging for Password Synchronization.\n\n\n If you enable

This policy setting allows an administrator to turn on the Windows to Network Information Service (NIS) password synchronizatio

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (Serv

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Best Effort service type (Serv

Specifies an alternate link layer (Layer-2) priority value for packets with the Best Effort service type (ServiceTypeBestEffort). The

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service type

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Controlled Load service type

Specifies an alternate link layer (Layer-2) priority value for packets with the Controlled Load service type (ServiceTypeControlledLo

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (Serv

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Guaranteed service type (Serv

Specifies an alternate link layer (Layer-2) priority value for packets with the Guaranteed service type (ServiceTypeGuaranteed). The

Specifies the maximum number of outstanding packets permitted on the system. When the number of outstanding packets reaches this

Determines the percentage of connection bandwidth that the system can reserve. This value limits the combined bandwidth reservatio

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service type

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Network Control service type

Specifies an alternate link layer (Layer-2) priority value for packets with the Network Control service type (ServiceTypeNetworkCont

Specifies an alternate link layer (Layer-2) priority value for packets that do not conform to the flow specification. The Packet Sch

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (Serv

Specifies an alternate Layer-3 Differentiated Services Code Point (DSCP) value for packets with the Qualitative service type (Serv

Specifies an alternate link layer (Layer-2) priority value for packets with the Qualitative service type (ServiceTypeQualitative). The

Determines the smallest unit of time that the Packet Scheduler uses when scheduling packets for transmission. The Packet Scheduler

This policy controls the Windows Management Instrumentation (WMI) providers Win32_ReliabilityStabilityMetrics and Win32_Reliability

Determines the execution level for Windows Resource Exhaustion Detection and Resolution.\n\n\nIf you enable this policy setting,

Requirements: At least Windows 7\n Description: This policy setting controls whether users can access the options in Recovery

Defines when the Shutdown Event Tracker System State Data feature is activated.\n\n\nThe system state data file contains informat

The Shutdown Event Tracker can be displayed when you shut down a workstation or server. This is an extra set of questions th

The Persistent System Timestamp allows the system to detect the time of unexpected shutdowns by writing the current time to disk

This setting controls whether or not unplanned shutdown events can be reported when error reporting is enabled.\n\n\nWhen this sett

This policy setting enables Remote Assistance invitations to be generated with improved encryption so that only computers running

The "Display warning message before sharing control" policy setting allows you to specify a custom message to display before a us

This policy setting allows you to turn on or turn off Offer (Unsolicited) Remote Assistance on this computer.\n\n\nIf you en

This policy setting allows you to enable or disable Solicited (Ask for) Remote Assistance on this computer.\n\n\nIf you enable t

This policy setting allows you to improve performance in low bandwidth scenarios.\n\n\nThis setting is incrementally scaled from "N

This policy setting allows you to turn logging on or off. Log files are located in the user's Documents folder under Remote Assistance.

Configure access to all removable storage classes.\n\n\nThis policy setting takes precedence over any individual removable storage

Configure access to all removable storage classes.\n\n\nThis policy setting takes precedence over any individual removable storage

This policy setting grants normal users direct access to removable storage devices in remote sessions.\n\n\nIf you enable this pol

This policy setting denies execute access to the CD and DVD removable storage class.\n\n\nIf you enable this policy setting, execu

This policy setting denies read access to the CD and DVD removable storage class.\n\n\nIf you enable this policy setting, read acc

This policy setting denies read access to the CD and DVD removable storage class.\n\n\nIf you enable this policy setting, read acc

This policy setting denies write access to the CD and DVD removable storage class.\n\n\nIf you enable this policy setting, write ac

This policy setting denies write access to the CD and DVD removable storage class.\n\n\nIf you enable this policy setting, write ac

This policy setting denies read access to custom removable storage classes.\n\n\nIf you enable this policy setting, read access w

This policy setting denies read access to custom removable storage classes.\n\n\nIf you enable this policy setting, read access w

This policy setting denies write access to custom removable storage classes.\n\n\nIf you enable this policy setting, write access

This policy setting denies write access to custom removable storage classes.\n\n\nIf you enable this policy setting, write access

This policy setting denies execute access to the Floppy Drives removable storage class, including USB Floppy Drives.\n\n\nIf you e

This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives.\n\n\nIf you enab

This policy setting denies read access to the Floppy Drives removable storage class, including USB Floppy Drives.\n\n\nIf you enab

This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives.\n\n\nIf you enab

This policy setting denies write access to the Floppy Drives removable storage class, including USB Floppy Drives.\n\n\nIf you enab

This policy setting denies execute access to removable disks.\n\n\nIf you enable this policy setting, execute access will be denied

This policy setting denies read access to removable disks.\n\n\nIf you enable this policy setting, read access will be denied to thi

This policy setting denies read access to removable disks.\n\n\nIf you enable this policy setting, read access will be denied to thi

This policy setting denies write access to removable disks.\n\n\nIf you enable this policy setting, write access will be denied t

This policy setting denies write access to removable disks.\n\n\nIf you enable this policy setting, write access will be denied t

This policy setting denies execute access to the Tape Drive removable storage class.\n\n\nIf you enable this policy setting, execu

This policy setting denies read access to the Tape Drive removable storage class.\n\n\nIf you enable this policy setting, read acce

This policy setting denies read access to the Tape Drive removable storage class.\n\n\nIf you enable this policy setting, read acce

This policy setting denies write access to the Tape Drive removable storage class.\n\n\nIf you enable this policy setting, write acc

This policy setting denies write access to the Tape Drive removable storage class.\n\n\nIf you enable this policy setting, write acc

Set the amount of time (in seconds) that the system will wait to reboot in order to enforce a change in access rights to removable s

Set the amount of time (in seconds) that the system will wait to reboot in order to enforce a change in access rights to removable s

This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, an

This policy setting denies read access to removable disks, which may include media players, cellular phones, auxiliary displays, an

This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, a

This policy setting denies write access to removable disks, which may include media players, cellular phones, auxiliary displays, a

Directs the RPC Runtime to ignore delegation failures if delegation was asked for.\n\n\nWindows Server 2003 family includes a

Directs the RPC Runtime to assume the specified timeout as the idle connection timeout even if the IIS server running the RPC H

Directs the RPC Runtime to generate extended error information when an error occurs.\n\n\nExtended error information includes the

If you enable this setting, it directs the RPC Runtime on an RPC server to restrict unauthenticated RPC clients connecting to RPC

Enabling this setting directs RPC Clients that need to communicate with the Endpoint Mapper Service to authenticate as long as

\n\n\n\nDetermines whether the RPC Runtime maintains RPC state information for the system, and how much information it maintain

This policy setting allows user logon scripts to run when the logon cross-forest, DNS suffixes are not configured and NetBIOS or WI

Determines how long the system waits for scripts applied by Group Policy to run.\n\n\nThis setting limits the total time allowed fo

Hides the instructions in logon scripts written for Windows NT 4.0 and earlier.\n\n\nLogon scripts are batch files of instruction

Displays the instructions in logoff scripts as they run.\n\n\nLogoff scripts are batch files of instructions that run when the user lo

Directs the system to wait for the logon scripts to finish running before it starts the Windows Explorer interface program and cre

Directs the system to wait for the logon scripts to finish running before it starts the Windows Explorer interface program and cre

Displays the instructions in logon scripts as they run.\n\n\nLogon scripts are batch files of instructions that run when the user log

Displays the instructions in shutdown scripts as they run.\n\n\nShutdown scripts are batch files of instructions that run when the

Lets the system run startup scripts simultaneously.\n\n\nStartup scripts are batch files that run before the user is invited to log o

Displays the instructions in startup scripts as they run.\n\n\nStartup scripts are batch files of instructions that run before the us

This policy setting determines whether Windows PowerShell scripts will run before non-PowerShell scripts during computer star

This policy setting determines whether Windows PowerShell scripts will run before non-PowerShell scripts during user logon and

This policy setting determines whether Windows PowerShell scripts will run before non-PowerShell scripts during user logon and

Determines whether scripted diagnostics will execute diagnostic packages that are signed by untrusted publishers.\n\n\nIf you enabl

This policy setting allows users to access and run the troubleshooting tools that are available in the Troubleshooting Control Pane

This policy setting allows users who are connected to the Internet to access and search troubleshooting content that is hosted on

Determines whether scheduled diagnostics will run to proactively detect and resolve system problems.\n\n\nIf you enable this polic

\n\n This Group Policy setting lets users turn off the performance optimization so that the TIFF IFilter will perform OCR fo

This policy setting allows selecting of OCR (Optical Character Recognition) languages that belong to one of the supported code p

This policy setting specifies whether Security Center is turned on or off for computers that are joined to an Active Directory dom

\n\n This policy setting turns off the location feature for this computer.\n\n\n If you enable this policy setting, the loc

\n\n This policy setting turns off the location feature for this computer.\n\n\n If you enable this policy setting, the loc

\n\n This policy setting turns off scripting for the location feature.\n\n\n If you enable this policy setting, scripts for the lo

\n\n This policy setting turns off scripting for the location feature.\n\n\n If you enable this policy setting, scripts for the lo

\n\n This policy setting turns off the sensor feature for this computer.\n\n\n If you enable this policy setting, the sens

\n\n This policy setting turns off the sensor feature for this computer.\n\n\n If you enable this policy setting, the sens

This policy setting allows you to set the refresh interval for Server Manager. Each refresh provides Server Manager with updated i

This policy setting allows you to turn off the automatic display of the Initial Configuration Tasks window at logon. \n\n\nIf you en

This policy setting allows you to turn off the automatic display of the Manage Your Server page. \n\n\nIf you enable this policy

This policy setting allows you to turn off the automatic display of Server Manager at logon.\n\n\nIf you enable this policy setting

Specifies an alternate location for Windows installation files.\n\n\nTo enable this setting, and enter the fully qualified path to t

Specifies an alternate location for Windows Service Pack installation files.\n\n\nTo enable this setting, enter the fully qualifie

Turns off data sharing from the handwriting recognition personalization tool.\n\n\nThe handwriting recognition personalization too

Turns off data sharing from the handwriting recognition personalization tool.\n\n\nThe handwriting recognition personalization too

Determines whether the user can publish DFS roots in Active Directory.\n\n\nIf you enable this setting or do not configure it, users

Determines whether the user can publish shared folders in Active Directory.\n\n\nIf you enable this setting or do not configure it,

By default, users can add their computer to a homegroup on a home network.\n\n\nIf you enable this policy setting, a user on this

By default users are allowed to share files within their profile to other users on their network once an administrator opts in the co

Prevents Windows from running the programs you specify in this setting.\n\n\nIf you enable this setting, users cannot run progr

Disables the Windows registry editor Regedit.exe.\n\n\nIf this setting is enabled and the user tries to start a registry editor, a

Prevents users from running the interactive command prompt, Cmd.exe. This setting also determines whether batch files (.cmd and

Limits the Windows programs that users have permission to run on the computer.\n\n\nIf you enable this setting, users can only

This policy setting prevents the display of the Welcome Center at user logon. \n\n\nIf you enable this policy setting, the Welcome

This policy setting allows you to override the More Gadgets link. The Gadget Gallery contains a link for users to download more g

This policy setting allows you to override the More Gadgets link. The Gadget Gallery contains a link for users to download more g

This policy setting allows you to restrict the installation of unsigned gadgets. Desktop gadgets can be deployed as compressed fi

This policy setting allows you to restrict the installation of unsigned gadgets. Desktop gadgets can be deployed as compressed fi

This policy setting allows you to turn off desktop gadgets. Gadgets are small applets that display information or utilities on the d

This policy setting allows you to turn off desktop gadgets. Gadgets are small applets that display information or utilities on the d

This policy setting allows you to turn off desktop gadgets that have been installed by the user.\n\n\nIf you enable this setting, Wi

This policy setting allows you to turn off desktop gadgets that have been installed by the user.\n\n\nIf you enable this setting, Wi

This policy setting deletes all data stored on Windows SideShow-compatible devices (running Microsoft firmware) when a user logs o

This policy setting deletes all data stored on Windows SideShow-compatible devices (running Microsoft firmware) when a user logs o

This policy setting requires users to enter a default personal identification number (PIN) to unlock and access data on the device

This policy setting requires users to enter a default personal identification number (PIN) to unlock and access data on the device

This policy setting turns off the option to periodically wake the computer to update information on Windows SideShow-compatible

This policy setting turns off the option to periodically wake the computer to update information on Windows SideShow-compatible

This policy setting turns off Windows SideShow.\n\n\nIf you enable this policy setting, the Windows SideShow Control Panel will

This policy setting turns off Windows SideShow.\n\n\nIf you enable this policy setting, the Windows SideShow Control Panel will

This policy setting lets you allow certificates without an Extended Key Usage (EKU) set to be used for logon.\n\n\nIn versions of Wi

This policy setting allows you to control whether elliptic curve cryptography (ECC) certificates on a smart card can be used to lo

This policy setting lets you determine whether the integrated unblock feature will be available in the logon User Interface (UI).\n\

This policy setting lets you allow signature key-based certificates to be enumerated and available for logon.\n\n\nIf you enable this

This policy setting permits those certificates to be displayed for logon that are either expired or not yet valid.\n\n\nUnder previous

This policy setting lets you determine whether an optional field will be displayed during logon and elevation that allows a user to

This policy setting allows you to manage the clean up behavior of root certificates. If you enable this policy setting then root certi

This policy setting allows you to manage the displayed message when a smart card is blocked.\n\n\nIf you enable this policy settin

This policy settings lets you configure if all your valid logon certificates are displayed.\n\n\nDuring the certificate renewal perio

This policy setting allows you to manage the reading of all certificates from the smart card for logon.\n\n\nDuring logon Windows wil

This policy setting allows you to control whether a confirmation message is displayed when a smart card device driver is installed

This policy setting prevents plaintext PINs from being returned by Credential Manager. \n\n\nIf you enable this policy setting, Cr

This policy setting lets you reverse the subject name from how it is stored in the certificate when displaying it during logon.

This policy setting allows you to manage the certificate propagation that occurs when a smart card is inserted.\n\n\nIf you enable or

This policy setting allows you to manage the root certificate propagation that occurs when a smart card is inserted.\n\n\nIf you enab

This policy setting allows you to control whether Smart Card Plug and Play is enabled.\n\n\nIf you enable or do not configure thi

This policy setting allows a Server for NIS administrator to configure an update interval for pushing Network Information Service (NI

This policy setting allows an administrator to configure extensive logging for computers that are running Server for Network Inform

Configures a list of the communities defined to the Simple Network Management Protocol (SNMP) service.\n\n\nSNMP is a protoco

This setting determines the permitted list of hosts that can submit a query to the Simple Network Management (SNMP) agent runn

This setting allows Trap configuration for the Simple Network Management Protocol (SNMP) agent.\n\n\nSimple Network Management

Specifies whether Sound Recorder can run.\n\n\nSound Recorder is a feature of Microsoft Windows Vista that can be used to recor

Specifies whether Sound Recorder can run.\n\n\nSound Recorder is a feature of Microsoft Windows Vista that can be used to recor

Lets users run a 16-bit program in a dedicated (not shared) Virtual DOS Machine (VDM) process.\n\n\nAll DOS and 16-bit progr

This policy only applies to the classic version of the start menu and does not affect the new style start menu.\n\n\nAdds the "Lo

\n\nIf you enable this policy, a "Search the Internet" link is shown when the user performs a search in the start menu search box. T

If you enable this setting, the Run command is added to the Start menu. If you disable or do not configure this setting, the Ru

Set the default action of the power button on the Start menu.\n\n\nIf you enable this setting, the Start Menu will set the power but

Clear history of recently opened documents on exit.\n\n\nIf you enable this setting, the system deletes shortcuts to recently use

If you enable this policy setting, the recent programs list in the start menu will be blank for each new user.\n\n\nIf you disable o

This setting affects the taskbar.\n\n\nThe taskbar includes the Start button, buttons for currently running tasks, custom toolba

Prevents the operating system and installed programs from creating and displaying shortcuts to recently opened documents.\n\n\nIf

If you enable this policy the start menu search box will not search for communications.\n\n\nIf you disable or do not configure thi

If you enable this policy setting the Start menu search box will not search for files.\n\n\nIf you disable or do not configure this

If you enable this policy the start menu search box will not search for internet history or favorites.\n\n\nIf you disable or do not co

If you enable this policy setting the Start menu search box will not search for programs or Control Panel items.\n\n\nIf you disabl

Prevents the system from conducting a comprehensive search of the target drive to resolve a shortcut.\n\n\nBy default, when the syste

Prevents the system from using NTFS tracking features to resolve a shortcut.\n\n\nBy default, when the system cannot find the target

This setting affects the presentation of the Start menu.\n\n\nThe classic Start menu in Windows 2000 Professional allows users

Displays Start menu shortcuts to partially installed programs in gray text.\n\n\nThis setting makes it easier for users to distingui

This setting affects the notification area (previously called the "system tray") on the taskbar.\n\n\nDescription: The notification are

This setting affects the taskbar, which is used to switch between running applications.\n\n\nThe taskbar includes the Start button,

Removes the Taskbar and Start Menu item from Settings on the Start menu. This setting also prevents the user from opening the Ta

This setting affects the taskbar buttons used to switch between running programs.\n\n\nTaskbar grouping consolidates similar appli

Hides the menus that appear when you right-click the taskbar and items on the taskbar, such as the Start button, the clock, an

If you enable this setting, the "All Programs" item is removed from the simple Start menu.\n\n\nIf you disable this setting or do n

This policy setting prevents users from performing the following commands from the Start menu or Windows Security screen: Sh

Hides pop-up text on the Start menu and in the notification area.\n\n\nWhen you hold the cursor over an item on the Start menu or i

Prevents the clock in the system notification area from being displayed.\n\n\nIf you enable this setting, the clock will not be displa

Removes items in the All Users profile from the Programs menu on the Start menu.\n\n\nBy default, the Programs menu contains it

Removes the Default Programs link from the Start menu.\n\n\nClicking the Default Programs link from the Start menu opens the De

Removes the Documents icon from the Start menu and its submenus.\n\n\nThis setting only removes the icon. It does not prevent

If you enable this policy the start menu will not show a link to the Downloads folder.

Prevents users from using the drag-and-drop method to reorder or remove items on the Start menu. Also, it removes context menu

Prevents users from adding the Favorites menu to the Start menu or classic Start menu.\n\n\nIf you enable this setting, the Disp

If you enable this setting, the frequently used programs list is removed from the Start menu.\n\n\nIf you disable this setting or do

If you enable this policy the start menu will not show a link to the Games folder.\n\n\nIf you disable or do not configure this poli

Removes the Help command from the Start menu.\n\n\nThis setting only affects the Start menu. It does not remove the Help m

If you enable this policy the Start menu will not show a link to Homegroup. It also removes the homegroup item from the Start Men

Prevents users from connecting to the Windows Update Web site.\n\n\nThis setting blocks user access to the Windows Update We

Removes the "Log Off <username>" item from the Start menu and prevents users from restoring it.\n\n\nIf you enable this set

Removes the Music icon from the Start Menu.

Prevents users from running Network Connections.\n\n\nThis setting prevents the Network Connections folder from opening. This

Removes the Network icon from the Start Menu.

Removes the Pictures icon from the Start Menu.

If you enable this setting, the "Pinned Programs" list is removed from the Start menu. Users cannot pin programs to the Start m

Prevents Control Panel, Printers, and Network Connections from running.\n\n\nThis setting removes the Control Panel, Printers,

Removes the Recent Items menu from the Start menu. Removes the Documents menu from the classic Start menu.\n\n\nThe Recent It

If you enable this policy the start menu will not show a link to the Recorded TV library.

Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.\n\n\nIf you enable this setting,

If you enable this policy, the "See all results" link will not be shown when the user performs a search in the start menu search box

Removes the Search link from the Start menu, and disables some Windows Explorer search elements. Note that this does not remov

\n\n If you enable this policy, a "See more results" / "Search Everywhere" link will not be shown when the user performs a

If you enable this setting, the "Undock PC" button is removed from the simple Start Menu, and your PC cannot be undocked.\n\n\

If you enable this policy the start menu will not show a link to the user's storage folder.\n\n\nIf you disable or do not configure thi

Remove the user name label from the Start Menu in Windows XP and Windows Server 2003.\n\n\nTo remove the user name folder

Hides all folders on the user-specific (top) section of the Start menu. Other items appear, but folders are hidden.\n\n\nThis setti

If you enable this policy the start menu will not show a link to the Videos library.

This policy setting controls whether the QuickLaunch bar is displayed in the Taskbar.\n\n\nIf you enable this policy setting, the Qu

This setting affects the notification area, also called the "system tray."\n\n\nThe notification area is located in the task bar, gene

Disables personalized menus.\n\n\nWindows personalizes long menus by moving recently used items to the top of the menu and hidin

If you disable or do not configure this setting, the system tracks the programs that the user runs. The system uses this inform

This setting assigns the email address(es) to which notifications will be sent. Use a semicolon (;) to separate multiple email add

This setting assigns the address of the SMTP server that sends out notifications.\n\n\nIf you enable this setting, Windows System

This setting directs the Accounting feature to log data on the accounting server at the specified time interval.\n\n\nIf you enab

This setting turns the Accounting feature On or Off.\n\n\nIf you enable this setting, Windows System Resource Manager (WSRM) wil

Allows you to disable System Restore configuration through System Protection.\n\n\nSystem Restore enables users, in the event of a

Allows you to disable System Restore.\n\n\nSystem Restore enables users, in the event of a problem, to restore their computers to

Prevents the Tablet PC Input Panel from providing text prediction suggestions. This policy applies for both the on-screen keyboard

Prevents the Tablet PC Input Panel from providing text prediction suggestions. This policy applies for both the on-screen keyboard

Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is availabl

Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is availabl

Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is available.

Prevents the Tablet PC Input Panel icon from appearing next to any text entry area in applications where this behavior is available.

Includes rarely used Chinese, Kanji, and Hanja characters when handwriting is converted to typed text. This policy applies only to

Includes rarely used Chinese, Kanji, and Hanja characters when handwriting is converted to typed text. This policy applies only to

Prevents Input Panel tab from appearing on the edge of the Tablet PC screen.\n\n\nTablet PC Input Panel is a Tablet PC accessory

Prevents Input Panel tab from appearing on the edge of the Tablet PC screen.\n\n\nTablet PC Input Panel is a Tablet PC accessory

Switches the gesture set used for editing from the common handheld computer gestures to the Simplified Chinese (PRC) standard ges

Switches the gesture set used for editing from the common handheld computer gestures to the Simplified Chinese (PRC) standard ges

Turns off the integration of application auto complete lists with Tablet PC Input Panel in applications where this behavior is availa

Turns off the integration of application auto complete lists with Tablet PC Input Panel in applications where this behavior is availa

Adjusts password security settings in Tablet PC Input Panel. These settings include using the on-screen keyboard by default, pr

Adjusts password security settings in Tablet PC Input Panel. These settings include using the on-screen keyboard by default, pr

\n\n Turns off both the more tolerant scratch-out gestures that were added in Windows Vista and the Z-shaped scratch-out ges

\n\n Turns off both the more tolerant scratch-out gestures that were added in Windows Vista and the Z-shaped scratch-out ges

Prevents start of InkBall game.\n\n\nIf you enable this policy, the InkBall game will not run.\n\n\nIf you disable this policy, the Ink

Prevents start of InkBall game.\n\n\nIf you enable this policy, the InkBall game will not run.\n\n\nIf you disable this policy, the Ink

Prevents printing to Journal Note Writer.\n\n\nIf you enable this policy, the Journal Note Writer printer driver will not allow printing to

Prevents printing to Journal Note Writer.\n\n\nIf you enable this policy, the Journal Note Writer printer driver will not allow printing to

Prevents the snipping tool from running.\n\n\nIf you enable this policy setting, the Snipping Tool will not run.\n\n\nIf you disable thi

Prevents the snipping tool from running.\n\n\nIf you enable this policy setting, the Snipping Tool will not run.\n\n\nIf you disable thi

Prevents start of Windows Journal.\n\n\nIf you enable this policy, the Windows Journal accessory will not run.\n\n\nIf you disable

Prevents start of Windows Journal.\n\n\nIf you enable this policy, the Windows Journal accessory will not run.\n\n\nIf you disable

Removes the Back->ESC mapping that normally occurs when menus are visible, and for applications that subscribe to this behavi

Removes the Back->ESC mapping that normally occurs when menus are visible, and for applications that subscribe to this behavi

Makes pen flicks and all related features unavailable.\n\n\nIf you enable this policy, pen flicks and all related features are unavailab

Makes pen flicks and all related features unavailable.\n\n\nIf you enable this policy, pen flicks and all related features are unavailab

Makes pen flicks learning mode unavailable.\n\n\nIf you enable this policy, pen flicks are still available but learning mode is not.

Makes pen flicks learning mode unavailable.\n\n\nIf you enable this policy, pen flicks are still available but learning mode is not.

Prevents the user from launching an application from a Tablet PC hardware button.\n\n\nIf you enable this policy, applications c

Prevents the user from launching an application from a Tablet PC hardware button.\n\n\nIf you enable this policy, applications c

Prevents press and hold actions on hardware buttons, so that only one action is available per button.\n\n\nIf you enable this policy,

Prevents press and hold actions on hardware buttons, so that only one action is available per button.\n\n\nIf you enable this policy,

Turns off Tablet PC hardware buttons.\n\n\nIf you enable this policy, no actions will occur when the buttons are pressed, and the

Turns off Tablet PC hardware buttons.\n\n\nIf you enable this policy, no actions will occur when the buttons are pressed, and the

Disables visual pen action feedback, except for press and hold feedback.\n\n\nIf you enable this policy, all visual pen action fee

Disables visual pen action feedback, except for press and hold feedback.\n\n\nIf you enable this policy, all visual pen action fee

If you enable this setting, users cannot pin files, folders, websites, or other items to their Jump Lists in the Start Menu and Taskb

If you enable this setting, users cannot change the programs currently pinned to the Taskbar. If any programs are already pinne

The Start Menu and Taskbar display Jump Lists off of programs. These menus include files, folders, websites and other relevant ite

Prevents the user from making any changes to the taskbar settings through the Taskbar Properties dialog.\n\n\nIf you enable this se

Prevents users from adding or removing toolbars.\n\n\nIf you enable this policy setting the user will not be allowed to add or remove

Prevents users from moving taskbar to another screen dock location.\n\n\nIf you enable this policy setting the user will not be able

Prevents users from rearranging toolbars.\n\n\nIf you enable this setting the user will not be able to drag or drop toolbars to the ta

Prevent users from resizing the taskbar.\n\n\nIf you enable this policy setting the user will not be able to resize their taskbar to b

If you enable this setting, pinned programs are prevented from being shown on the Taskbar. Users cannot pin programs to the Task

Prevents the Action Center in the system control area from being displayed. If you enable this setting, the Action Center icon will n

Prevents the battery meter in the system control area from being displayed. If you enable this setting, the battery meter will not be

Prevents the networking icon in the system control area from being displayed. If you enable this setting, the networking icon will no

Prevents the volume control icon in the system control area from being displayed. If you enable this setting, the volume control icon

If you enable this setting no notification balloons will be shown to the user.\n\n\nIf you disable or do not configure this setting ball

If you enable this setting, newly added notification icons will not be temporarily promoted to the Taskbar. Users can still configur

If you enable this setting, certain notification balloons that are marked as feature advertisements will not be shown.\n\n\nIf you di

If you enable this setting the taskbar thumbnails will not be shown, and the system will use standard text for the tooltips.\n\n\nIf

This setting removes the "Open advanced properties for this task when I click Finish" checkbox from the last page of the Schedul

This setting removes the "Open advanced properties for this task when I click Finish" checkbox from the last page of the Schedul

Prevents users from viewing and changing the properties of an existing task.\n\n\nThis setting removes the Properties item from

Prevents users from viewing and changing the properties of an existing task.\n\n\nThis setting removes the Properties item from

Prevents users from starting and stopping tasks manually.\n\n\nThis setting removes the Run and End Task items from the context

Prevents users from starting and stopping tasks manually.\n\n\nThis setting removes the Run and End Task items from the context

Limits newly scheduled to items on the user's Start menu, and prevents the user from changing the scheduled program for existing

Limits newly scheduled to items on the user's Start menu, and prevents the user from changing the scheduled program for existing

Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder.\n\n\nThis setting dis

Prevents users from adding or removing tasks by moving or copying programs in the Scheduled Tasks folder.\n\n\nThis setting dis

Prevents users from creating new tasks.\n\n\nThis setting removes the Add Scheduled Task item that starts the New Task Wizard.

Prevents users from creating new tasks.\n\n\nThis setting removes the Add Scheduled Task item that starts the New Task Wizard.

Prevents users from deleting tasks from the Scheduled Tasks folder.\n\n\nThis setting removes the Delete command from the Edit

Prevents users from deleting tasks from the Scheduled Tasks folder.\n\n\nThis setting removes the Delete command from the Edit

This policy setting allows you to specify a 6to4 relay name for a 6to4 host. A 6to4 relay is used as a default gateway for IPv6 netwo

This policy setting allows you to specify the interval at which the relay name is resolved. The 6to4 relay name resolution interval se

This policy setting allows you to configure 6to4, an address assignment and router-to-router automatic tunneling technology that is

This policy setting allows you to configure IP-HTTPS, a tunneling technology that uses the HTTPS protocol to provide IP connectiv

This policy setting allows you to specify a router name or Internet Protocol version 4 (IPv4) address for an ISATAP router.\n\n\nIf

This policy setting allows you to configure Intra-Site Automatic Tunnel Addressing Protocol (ISATAP), an address-to-router and ho

This policy setting allows you to select the UDP port the Teredo client will use to send packets. If you leave the default of 0, the o

This policy setting allows you to set Teredo to be ready to communicate, a process referred to as qualification. By default, Teredo

This policy setting allows you to configure the Teredo refresh rate.\n\n\nNote: On a periodic basis (by default, every 30 seconds)

This policy setting allows you to specify the name of the Teredo server. This server name will be used on the Teredo client compute

This policy setting allows you to configure Teredo, an address assignment and automatic tunneling technology that provides unicast I

Windows Scaling Heuristics is a algorithm to identify connectivity and throughput problems caused by many Firewalls and other mid

This policy setting allows you to specify whether users can run unsigned Remote Desktop Protocol (.rdp) files and .rdp files from

This policy setting allows you to specify whether users can run unsigned Remote Desktop Protocol (.rdp) files and .rdp files from

This policy setting allows you to specify whether users can run Remote Desktop Protocol (.rdp) files from a publisher that signed t

This policy setting allows you to specify whether users can run Remote Desktop Protocol (.rdp) files from a publisher that signed t

This policy setting allows you to specify whether users can redirect the remote computer's audio and video output in a Remote D

This policy setting allows you to specify whether users can record audio to the remote computer in a Remote Desktop Services ses

This policy setting determines whether the client computer redirects its time zone settings to the Remote Desktop Services session

This policy setting allows you to configure remote access to computers using Remote Desktop Services.\n\n\nIf you enable thi

Specifies whether Remote Desktop Services always prompts the client for a password upon connection.\n\n\nYou can use this sett

This policy setting determines whether the desktop is always displayed after a client connects to a remote computer or an initial p

Specifies whether to allow Remote Desktop Connection clients to automatically reconnect to sessions on an RD Session Host server

This policy setting allows you to enter a keep-alive interval to ensure that the session state on the RD Session Host server is con

This policy setting allows you to specify the name of a farm to join in RD Connection Broker. RD Connection Broker uses the fa

This policy setting allows you to specify the RD Connection Broker server that the RD Session Host server uses to track and re

This policy setting allows you to specify whether the client will establish a connection to the RD Session Host server when the c

This policy setting determines whether an administrator attempting to connect remotely to the console of a server can log off an

This policy setting allows you to specify whether to prevent the mapping of client printers in Remote Desktop Services sessions.\n\

Specifies whether to prevent the sharing of clipboard contents (clipboard redirection) between a remote computer and a client com

Specifies whether to prevent the redirection of data to client COM ports from the remote computer in a Remote Desktop Services s

Specifies whether to prevent the mapping of client drives in a Remote Desktop Services session (drive redirection).\n\n\nBy default

Specifies whether to disable the administrator rights to customize security permissions in the Remote Desktop Session Host Confi

Specifies whether to prevent the redirection of data to client LPT ports during a Remote Desktop Services session.\n\n\nYou can us

Controls whether passwords can be saved on this computer from Remote Desktop Connection.\n\n\nIf you enable this setting the

Controls whether a user can save passwords using Remote Desktop Connection.\n\n\nIf you enable this setting the credential sav

This policy setting allows you to control the redirection of smart card devices in a Remote Desktop Services session.\n\n\nIf yo

This policy setting allows you to control the redirection of supported Plug and Play devices, such as Windows Portable Devices,

Specifies whether Remote Desktop Services retains a user's per-session temporary folders at logoff.\n\n\nYou can use this setting

This policy setting allows you to specify whether the client default printer is automatically set as the default printer in a sessio

This policy setting allows you to prevent Remote Desktop Services from creating session-specific temporary folders.\n\n\nYou can

If you enable this policy setting, when Remote Desktop Connection cannot connect directly to a remote computer (an RD Session Hos

Specifies whether desktop wallpaper is displayed to remote clients connecting via Remote Desktop Services.\n\n\nYou can use th

This policy setting determines whether notifications are displayed on an RD Session Host server when there are problems with RD Lic

This policy setting allows you to specify whether the RD Session Host server should join a farm in RD Connection Broker. RD Con

This policy setting allows you to specify the RD Session Host servers to which a Remote Desktop license server will offer Rem

This policy setting allows you to limit the audio playback quality for a Remote Desktop Services session. Limiting the quality of

This policy setting allows you to specify the maximum color resolution (color depth) for Remote Desktop Services connections.\n\n

This policy setting allows you to specify the maximum display resolution that can be used by each monitor used to display a Rem

This policy setting allows you to limit the number of monitors that a user can use to display a Remote Desktop Services session

Specifies whether Remote Desktop Services limits the number of simultaneous connections to the server.\n\n\nYou can use this s

This policy setting allows you to limit the size of the entire roaming user profile cache on the local drive. This policy setting

\n\n This policy setting allows you to specify the visual experience that remote users receive in Remote Desktop Services s

This policy setting allows you to specify which version of Remote Desktop Services client access license (RDS CAL) a Remote Des

This policy setting determines whether a user will be prompted on the client computer to provide credentials for a remote connec

This policy setting allows you to remove the "Disconnect" option from the Shut Down Windows dialog box in Remote Desktop Servi

Specifies whether to remove the Windows Security item from the Settings menu on Remote Desktop clients. You can use this setti

Specifies whether a Remote Desktop Session Host server requires secure RPC communication with all clients or allows unsecured

Specifies whether to require the use of a specific security layer to secure communications between clients and RD Session Host

This policy setting allows you to specify whether to require user authentication for remote connections to the RD Session Host s

This policy setting allows you to restrict users to a single remote Remote Desktop Services session.\n\n\nIf you enable this polic

This policy setting allows you to specify the name of the certificate template that determines which certificate is automatically s

Specifies whether to require the use of a specific encryption level to secure communications between clients and RD Session Host

This policy setting allows you to specify which Remote Desktop Protocol (RDP) compression algorithm to use.\n\n\nBy default, se

This policy setting allows you to specify the network path that Remote Desktop Services uses for roaming user profiles.\n\n\nBy

Specifies the authentication method that clients must use when attempting to connect to an RD Session Host server through an RD Gat

Specifies the address of the RD Gateway server that clients must use when attempting to connect to an RD Session Host server. You

Specifies whether Remote Desktop Services uses the specified network share or local directory path as the root of the user's hom

This policy setting allows you to specify the level of remote control permitted in a Remote Desktop Services session.\n\n\nYou can

This policy setting allows you to specify the level of remote control permitted in a Remote Desktop Services session.\n\n\nYou can

This policy setting allows you to specify the type of Remote Desktop Services client access license (RDS CAL) that is required

This policy setting allows you to specify the maximum amount of time that an active Remote Desktop Services session can be idle

This policy setting allows you to specify the maximum amount of time that an active Remote Desktop Services session can be idle

This policy setting allows you to specify the maximum amount of time that a Remote Desktop Services session can be active befor

This policy setting allows you to specify the maximum amount of time that a Remote Desktop Services session can be active befor

This policy setting allows you to configure a time limit for disconnected Remote Desktop Services sessions.\n\n\nYou can use thi

This policy setting allows you to configure a time limit for disconnected Remote Desktop Services sessions.\n\n\nYou can use thi

This policy setting allows you to specify the RD Session Host server fallback printer driver behavior.\n\n\nBy default, the RD Session

This policy setting allows you to specify a list of Secure Hash Algorithm 1 (SHA1) certificate thumbprints that represent trusted Remot

This policy setting allows you to specify a list of Secure Hash Algorithm 1 (SHA1) certificate thumbprints that represent trusted Remot

Configures Remote Desktop Services to run a specified program automatically upon connection.\n\n\nYou can use this setting to spe

Configures Remote Desktop Services to run a specified program automatically upon connection.\n\n\nYou can use this setting to spe

Specifies whether to terminate a timed-out Remote Desktop Services session instead of disconnecting it.\n\n\nYou can use this sett

Specifies whether to terminate a timed-out Remote Desktop Services session instead of disconnecting it.\n\n\nYou can use this sett

This policy setting allows you to specify the redirection method to use when a client device reconnects to an existing Remote De

This policy setting allows you to specify whether Remote Desktop Services uses a mandatory profile for all users connecting remo

This policy setting allows you to specify whether the Remote Desktop Easy Print printer driver is used first to install all client pri

This policy setting allows you to specify whether the Remote Desktop Easy Print printer driver is used first to install all client pri

This policy setting allows you to specify the order in which an RD Session Host server attempts to locate Remote Desktop license

This policy setting allows you to specify whether desktop composition is allowed for remote desktop sessions. This policy sett

This policy setting allows you to specify whether remote users can start any program on the RD Session Host server when they

This policy setting allows you to specify whether the client computer redirects its time zone settings to the Remote Desktop Servic

This policy setting allows you to specify whether the desktop is always displayed after a client connects to a remote computer or w

This policy setting allows you to specify whether to prevent the sharing of clipboard contents (clipboard redirection) between a

This policy setting allows you to specify whether font smoothing is allowed for remote connections.\n\n\nFont smoothing provides

This policy setting specifies whether a session uses the IP address of the Remote Desktop Session Host server if a virtual IP address

This policy setting allows you to specify whether the default client printer is the only printer redirected in Remote Desktop Service

This policy setting allows you to specify whether the default client printer is the only printer redirected in Remote Desktop Service

This policy setting allows you to specify whether desktop wallpaper is displayed to clients when they are connected to a remote

This policy setting specifies the IP address and network mask that corresponds to the network adapter used for virtual IP address

This policy setting allows you to specify how long a user's RemoteApp session will remain in a disconnected state before the se

This policy setting allows you to specify how long a user's RemoteApp session will remain in a disconnected state before the se

Fair Share CPU Scheduling dynamically distributes processor time across all Remote Desktop Services sessions on the same RD Se

This policy setting specifies whether Windows Installer RDS Compatibility runs on a per user basis for fully installed application

This policy setting specifies whether Remote Desktop IP Virtualization is turned on. \nBy default, Remote Desktop IP Virtualizatio

This policy setting allows you to specify whether to use the RD Connection Broker load balancing feature to balance the load bet

Turns off the caching of thumbnails in hidden thumbs.db files.\n\n\nThis policy setting allows you to configure Windows Explorer to

Disables the display of thumbnails on network folders in Windows Explorer.\n\n\nWindows Explorer displays thumbnails on network

Disables the display of thumbnails in Windows Explorer.\n\n\nWindows Explorer displays thumbnails by default.\n\n\nIf you enable

Turn off Tablet PC touch input\n\n\nTurns off touch input, which allows the user to interact with their computer using their finger.\n

Turn off Tablet PC touch input\n\n\nTurns off touch input, which allows the user to interact with their computer using their finger.\n

Turn off Panning \nTurns off touch panning, which allows users pan inside windows by touch. On a compatible PC with a touch d

Turn off Panning \nTurns off touch panning, which allows users pan inside windows by touch. On a compatible PC with a touch d

This policy setting allows you to manage the Group Policy list of Trusted Platform Module (TPM) commands blocked by Windows

This policy setting allows you to enforce or ignore the computer's default list of blocked Trusted Platform Module (TPM) comman

This policy setting allows you to enforce or ignore the computer's local list of blocked Trusted Platform Module (TPM) commands

This policy setting allows you to manage the Active Directory Domain Services (AD DS) backup of Trusted Platform Module (TPM

This setting lets you prevent users from selecting a local disk (internal or external) for storing backups.\n\n\nIf this setting is ena

This setting lets you prevent users from selecting a local disk (internal or external) for storing backups.\n\n\nIf this setting is ena

This setting lets you prevent users from selecting a network location for storing backups.\n\n\nIf this setting is enabled, users wi

This setting lets you prevent users from selecting a network location for storing backups.\n\n\nIf this setting is enabled, users wi

This setting lets you prevent users from selecting optical media (CD/DVD) for storing backups.\n\n\nIf this setting is enabled, user

This setting lets you prevent users from selecting optical media (CD/DVD) for storing backups.\n\n\nIf this setting is enabled, user

This setting lets you disable the Backup Status and Configuration program, which links to the file backup, file restore, and Comp

This setting lets you disable the Backup Status and Configuration program, which links to the file backup, file restore, and Comp

This setting lets you disable file restore functionality.\n\n\nIf this setting is enabled, the file restore program is disabled.\n\n\nIf

This setting lets you disable file restore functionality.\n\n\nIf this setting is enabled, the file restore program is disabled.\n\n\nIf

This setting lets you disable the data file backup functionality.\n\n\nIf this setting is enabled, users cannot back up data files.\n\n\

This setting lets you disable the data file backup functionality.\n\n\nIf this setting is enabled, users cannot back up data files.\n\n\

This setting lets you disable the creation of system images.\n \nIf this setting is enabled, users cannot create system ima

This setting lets you disable the creation of system images.\n \nIf this setting is enabled, users cannot create system ima

This setting adds the Administrator security group to the roaming user profile share.\n\n\nOnce an administrator has configured a use

Sets the schedule for background uploading of a roaming user profile's registry file (ntuser.dat). This setting will only upload the

Restores the definitions of the %HOMESHARE% and %HOMEPATH% environment variables to those used in Windows NT 4.0 and earlier.

Determines whether the system saves a copy of a userΓÇÖs roaming profile on the local computer's hard drive when the user logs off

This policy setting allows an administrator to automatically delete user profiles on system restart that have not been used within a

This setting disables the more secure default setting for the userΓÇÖs roaming user profile folder.\n\n\nOnce an administrator has

Disables the slow link detection feature.\n\n\nSlow link detection measures the speed of the connection between a user's computer

Microsoft Windows will always unload the users registry, even if there are any open handles to the per-user registry keys at user l

This policy will automatically log off a user when Windows cannot load their profile.\n\n\nIf Windows cannot access the user profile

Lets you add to the list of folders excluded from the user's roaming profile.\n\n\nThis setting lets you exclude folders that are n

Determines whether the system retains a roaming userΓÇÖs Windows Installer and Group Policy based software installation data on th

This policy setting sets the maximum size of each user profile and determines the system's response when a user profile reaches the

Determines how many times the system tries to unload and update the registry portion of a user profile. When the number of trials s

This policy setting allows you to specify which network directories will be synchronized only at logon and logoff via Offline Files.

This setting determines if roaming user profiles are available on a particular computer. By default, when roaming profile users log

This setting determines if the changes a user makes to their roaming profile are merged with the server copy of their profile.\n\n\n

This policy setting provides users with the ability to download their roaming profile, even when a slow network connection with th

If the user has a roaming user profile or remote home directory and the network is currently unavailable, Microsoft Windows waits

Specifies whether Microsoft Windows should use the specified network path as the roaming user profile path for all users logging on

Defines a slow connection for roaming user profiles.\n\n\nIf the server on which the user's roaming user profile resides takes lo

Determines how long the system waits for a user response before it uses a default value.\n\n\nThe default value is applied when t

Directs the system to wait for the remote copy of the roaming user profile to load, even when loading is slow. Also, the system wai

This policy setting configures whether or not fixed data drives formatted with the FAT file system can be unlocked and viewed o

This policy setting configures whether or not removable data drives formatted with the FAT file system can be unlocked and vie

This policy setting allows you to configure whether or not enhanced startup PINs are used with BitLocker.\n\n\nEnhanced startup

This policy setting allows you to specify the default path that is displayed when the BitLocker Drive Encryption setup wizard prompt

This policy setting allows you to configure the algorithm and cipher strength used by BitLocker Drive Encryption. This policy setti

This policy setting allows you to control how BitLocker-protected fixed data drives are recovered in the absence of the required

This policy setting allows you to control how BitLocker-protected operating system drives are recovered in the absence of the r

This policy setting allows you to control how BitLocker-protected removable data drives are recovered in the absence of the req

This policy setting allows you to control whether the BitLocker Drive Encryption setup wizard can display and specify BitLocker re

This policy setting allows you to configure a minimum length for a Trusted Platform Module (TPM) startup PIN. This policy setting

This policy setting allows you to configure how the computer's Trusted Platform Module (TPM) security hardware secures the BitL

This policy setting specifies whether a password is required to unlock BitLocker-protected fixed data drives. If you choose to p

This policy setting specifies whether a password is required to unlock BitLocker-protected removable data drives. If you choose

This policy setting allows you to specify whether smart cards can be used to authenticate user access to the BitLocker-protected f

This policy setting allows you to specify whether smart cards can be used to authenticate user access to BitLocker-protected remo

This policy setting controls the use of BitLocker on removable data drives. This policy setting is applied when you turn on BitL

This policy setting determines whether BitLocker protection is required for fixed data drives to be writable on a computer. This poli

This policy setting configures whether BitLocker protection is required for a computer to be able to write data to a removable data

This policy setting controls computer restart performance at the risk of exposing BitLocker secrets. This policy setting is appli

This policy setting allows you to associate unique organizational identifiers to a new drive that is enabled with BitLocker. These

This policy setting allows you to configure whether BitLocker requires additional authentication each time the computer starts an

This policy setting allows you to control whether the BitLocker Drive Encryption setup wizard will be able to set up an additional

This policy setting allows you to manage the Active Directory Domain Services (AD DS) backup of BitLocker Drive Encryption rec

This policy setting allows you to associate an object identifier from a smart card certificate to a BitLocker-protected drive. This pol

Specifies a set of parameters for controlling the Windows NTP Client.\n\n\nNtpServer: The Domain Name System (DNS) name or IP ad

Specifies whether the Windows NTP Client is enabled. Enabling the Windows NTP Client allows your computer to synchronize its c

Specifies whether the Windows NTP Server is enabled. Enabling the Windows NTP Server allows your computer to service NTP

These settings control the Windows Time service (W32time) for domain controllers. Several of these values are scalar, which mea

Determines the execution level for Diagnostic Policy Service (DPS) scenarios.\n\n\nIf you enable this policy setting, you must sele

Determines the data retention limit for Diagnostic Policy Service (DPS) scenario data.\n\n\nIf you enable this policy setting, you

Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing them

Windows Calendar is a feature that allows users to manage appointments and tasks by creating personal calendars, publishing them

By default Windows Anytime Upgrade is available for all administrators. \n\n\nIf you enable this policy setting, Windows Anytime U

By default Windows Anytime Upgrade is available for all administrators. \n\n\nIf you enable this policy setting, Windows Anytime U

This policy setting allows you to manage whether backups of only system volumes is allowed or both OS and data volumes can be

This policy setting allows you to manage whether backups of a machine can run to locally attached storage or not.\n\n\nIf you enab

This policy setting allows you to manage whether backups of a machine can run to a network share or not.\n\n\nIf you enable this

This policy setting allows you to manage whether backups of a machine can run to an optical media or not.\n\n\nIf you enable this

This policy setting allows you to manage whether run-once backups of a machine can be run or not.\n\n\nIf you enable this polic

This policy setting affects the ability of users to install or uninstall color profiles.\n\n\nIf you enable this policy setting, users will

This policy setting affects the ability of users to install or uninstall color profiles.\n\n\nIf you enable this policy setting, users will

This policy setting allows the configuration of wireless settings using Windows Connect Now (WCN). The WCN Registrar enables the d

This policy setting prohibits access to Windows Connect Now (WCN) wizards. If this policy setting is enabled, the wizards are di

This policy setting prohibits access to Windows Connect Now (WCN) wizards. If this policy setting is enabled, the wizards are di

Checks for new signatures before running scheduled scans.\n\n\nIf you enable this policy setting, the scheduled scan checks for

Adjusts membership in Microsoft SpyNet. \n\n\nMicrosoft SpyNet is the online community that helps you choose how to respond to p

Turns off Real-Time Protection prompts for known malware detection.\n\n\nWindows Defender alerts you when spyware or potentially

Turns off Routinely Taking Action.\n\n\nThis policy setting allows you to configure whether Windows Defender will automatically tak

Turns off Windows Defender Real-Time Protection, and no more scans are scheduled.\n\n\nIf you enable this policy setting, Wind

This policy setting allows you to configure Windows Defender to check and install definition updates from Windows Update the M

This policy setting allows you to configure Windows Defender to check and install definition updates from Windows Update when

This setting is designed to ensure that shell extensions can operate on a per-user basis. If you enable this setting, Windows

\n\nThis policy setting allows you to manage whether OpenSearch queries in this zone can be performed using Search Connectors




















\n\nThis policy setting allows you to manage whether a user may preview an item from this zone or display custom thumbnails in t




















\n\nChanges the behavior of IShellFolder::BindToObject for IID_IPropertySetStorage to not bind directly to the IPropertySetStor

\n\nChanges the behavior of IShellFolder::BindToObject for IID_IPropertySetStorage to not bind directly to the IPropertySetStor

This policy setting allows you to specify a list of known folders that should be disabled. Disabling a known folder will prevent

Allows you to have Windows Explorer display a confirmation dialog whenever a file is deleted or moved to the Recycle Bin.\n\n\nIf

When a file or folder is deleted in Windows Explorer, a copy of the file or folder is placed in the Recycle Bin. Using this setting,

Prevents users from submitting alternate logon credentials to install a program.\n\n\nThis setting suppresses the "Install Program

Determines whether Windows traces shortcuts back to their sources when it cannot find the target on the user's system.\n\n\nShortcut

Hide the Back button in the Open dialog box.\n\n\nThis policy setting lets you remove new features added in Microsoft Windows 20

Removes the shortcut bar from the Open dialog box.\n\n\nThis setting, and others in this folder, lets you remove new features ad

Removes the list of most recently used files from the Open dialog box.\n\n\nIf you disable this setting or do not configure it, th

Removes the icons representing selected hard drives from My Computer and Windows Explorer. Also, the drive letters representing th

Removes the Manage item from the Windows Explorer context menu. This context menu appears when you right-click Windows Ex

Configures the list of items displayed in the Places Bar in the Windows File/Open dialog. If enable this setting you can specify

Limits the percentage of a volume's disk space that can be used to store deleted files.\n\n\nIf you enable this setting, the user

Determines how many shortcuts the system can display in the Recent Items menu on the Start menu.\n\n\nThe Recent Items menu

Removes computers in the user's workgroup and domain from lists of network resources in Windows Explorer and Network Locatio

Removes all computers outside of the user's workgroup or local domain from lists of network resources in Windows Explorer and

This policy setting allows you to add Internet or intranet sites to the "Search again" links located at the bottom of search result

This policy setting allows up to five Libraries or Search Connectors to be pinned to the "Search again" links and the Start menu li

Prevents users from using My Computer to gain access to the content of selected drives.\n\n\nIf you enable this setting, users ca

Prevents users from using Windows Explorer or Network Locations to map or disconnect network drives.\n\n\nIf you enable this s

Windows Explorer allows you to create and modify re-writable CDs if you have a CD writer connected to your PC.\n\n\nIf you enable

Removes the DFS tab from Windows Explorer.\n\n\nThis setting removes the DFS tab from Windows Explorer and from other progra

Removes the File menu from My Computer and Windows Explorer.\n\n\nThis setting does not prevent users from using other met

Removes the Hardware tab.\n\n\nThis setting removes the Hardware tab from Mouse, Keyboard, and Sounds and Audio Devices in Con

Removes the Search button from the Windows Explorer toolbar.\n\n\nThis setting removes the Search button from the Standard B

Removes the Security tab from Windows Explorer.\n\n\nIf you enable this setting, users opening the Properties dialog box for all file

Removes the Shared Documents folder from My Computer.\n\n\nWhen a Windows client is in a workgroup, a Shared Documents icon a

If you enable this policy, the "Internet" "Search again" link will not be shown when the user performs a search in the Explorer win

Disables the "Hide keyboard navigation indicators until I use the ALT key" option in Display in Control Panel.\n\n\nWhen this Dis

Prevents users from selecting the option to animate the movement of windows, menus, and lists.\n\n\nIf you enable this setting, t

Removes shortcut menus from the desktop and Windows Explorer. Shortcut menus appear when you right-click an item.\n\n\nIf you

Removes the Folder Options item from all Windows Explorer menus and removes the Folder Options item from Control Panel. As a re

Prompts users for alternate logon credentials during network-based installations.\n\n\nThis setting displays the "Install Program A

This settings controls whether the thumbnail views are cached.\n\n\nIf you enable this setting, thumbnail views are not cached.\

\n\nDisables suggesting recent queries for the Search Box and prevents entries into the Search Box from being stored in the regis

\n\nThis policy setting allows you to have file names sorted literally (as in Windows 2000 and earlier) rather than in numerical orde

\n\nThis policy setting allows you to have file names sorted literally (as in Windows 2000 and earlier) rather than in numerical orde

This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full function

This policy setting allows you to configure the amount of functionality that the shell protocol can have. When using the full function

Disables the display of snippets when Content view mode is turned on.\n\n\nWindows Explorer shows snippets in Content view mod

This policy setting allows you to turn off Windows Libraries features that need indexed file metadata to function properly. If you

Turn off Windows+X hotkeys.\n\n\nKeyboards with a Windows key provide users with shortcuts to common shell features. For exa

This setting allows an administrator to revert specific Windows Shell behavior to classic Shell behavior.\n\n\nIf you enable this

This policy setting allows you to prevent data loss when you change the target location for Folder Redirection, and the new and old t

Hides the file scan progress window.\n\n\nThis window provides status information to sophisticated users, but it might confuse novi

Specifies the maximum amount of disk space that can be used for the Windows File Protection file cache.\n\n\nWindows File Prote

Determines when Windows File Protection scans protected files. This setting directs Windows File Protection to enumerate and scan

Specifies an alternate location for the Windows File Protection cache.\n\n\nTo enable this setting, enter the fully qualified local

Allows unsolicited incoming messages from specified systems that authenticate using the IPsec transport.\n\n\nIf you enable this

Defines the set of Internet Control Message Protocol (ICMP) message types that Windows Firewall allows. Utilities can use ICMP

Defines the set of Internet Control Message Protocol (ICMP) message types that Windows Firewall allows. Utilities can use ICMP

Allows inbound file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445.\n\

Allows inbound file and printer sharing. To do this, Windows Firewall opens UDP ports 137 and 138, and TCP ports 139 and 445.\n\

Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) and

Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) and

Allows this computer to receive inbound Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389.\n\n\nIf you

Allows this computer to receive inbound Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389.\n\n\nIf you

Allows this computer to receive unsolicited inbound Plug and Play messages sent by network devices, such as routers with built

Allows this computer to receive unsolicited inbound Plug and Play messages sent by network devices, such as routers with built

Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Firew

Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Firew

Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows F

Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows F

Allows Windows Firewall to record information about the unsolicited incoming messages that it receives.\n\n\nIf you enable this po

Allows Windows Firewall to record information about the unsolicited incoming messages that it receives.\n\n\nIf you enable this po

Allows you to view and change the inbound port exceptions list defined by Group Policy. Windows Firewall uses two port exception li

Allows you to view and change the inbound port exceptions list defined by Group Policy. Windows Firewall uses two port exception li

Allows you to view and change the program exceptions list defined by Group Policy. Windows Firewall uses two program exception lis

Allows you to view and change the program exceptions list defined by Group Policy. Windows Firewall uses two program exception lis

Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firewal

Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firewal

Prevents Windows Firewall from displaying notifications to the user when a program requests that Windows Firewall add the progra

Prevents Windows Firewall from displaying notifications to the user when a program requests that Windows Firewall add the progra

Prevents this computer from receiving unicast responses to its outgoing multicast or broadcast messages.\n\n\nIf you enable th

Prevents this computer from receiving unicast responses to its outgoing multicast or broadcast messages.\n\n\nIf you enable th

Turns on Windows Firewall.\n\n\nIf you enable this policy setting, Windows Firewall runs and ignores the "Computer Configuration

Turns on Windows Firewall.\n\n\nIf you enable this policy setting, Windows Firewall runs and ignores the "Computer Configuration

Windows Mail will not check your newsgroup servers for Communities support.

Windows Mail will not check your newsgroup servers for Communities support.

Denies or allows access to the Windows Mail application.\n\n\nIf you enable this setting, access to the Windows Mail application i

Denies or allows access to the Windows Mail application.\n\n\nIf you enable this setting, access to the Windows Mail application i

Prevents Windows Media Digital Rights Management (DRM) from accessing the Internet (or intranet).\n\n\nWhen enabled, Windows Me

Enables a screen saver to interrupt playback.\n\n\nThis policy displays a screen saver during playback of digital media according

Specifies the HTTP proxy settings for Windows Media Player.\n\n\nThis policy specifies the proxy settings for the HTTP protocol.

Specifies the MMS proxy settings for Windows Media Player.\n\n\nThis policy specifies the proxy settings for the MMS protocol. W

Specifies whether network buffering uses the default or a specified number of seconds.\n\n\nThis policy specifies that the default

Specifies the RTSP proxy settings for Windows Media Player.\n\n\nThis policy specifies the proxy settings for the RTSP protocol.

Prevents the anchor window from being displayed when Windows Media Player is in skin mode.\n\n\nThis policy hides the anchor wi

Do Not Show First Use Dialog Boxes\n\n\nThis policy prevents the Privacy Options and Installation Options dialog boxes from being

Hides the Network tab.\n\n\nThis policy hides the Network tab in Windows Media Player. The default network settings are used unl

Hides the Privacy tab.\n\n\nThis policy hides the Privacy tab in Windows Media Player. The default privacy settings are used for

Hides the Security tab.\n\n\nThis policy hides the Security tab in Windows Media Player. The default security settings for the opt

Prevents users from being prompted to update Windows Media Player.\n\n\nThis policy prevents the Player from being updated and p

Prevents media information for CDs and DVDs from being retrieved from the Internet.\n\n\nThis policy prevents the Player from au

Prevents Windows Media Player from downloading codecs.\n\n\nThis policy prevents the Player from automatically downloading cod

This policy prevents a shortcut icon for the Player from being added to the user's desktop.\n\n\nWhen this policy is not configure

Prevents media sharing from Windows Media Player.\n\n\nThis policy prevents any user on this computer from sharing digital me

Prevents media information for music files from being retrieved from the Internet.\n\n\nThis policy prevents the Player from aut

This policy prevents a shortcut for the Player from being added to the Quick Launch bar.\n\n\nWhen this policy is not configured

Prevents radio station presets from being retrieved from the Internet.\n\n\nThis policy prevents the Player from automatically retri

Prevents video smoothing from occurring.\n\n\nThis policy prevents video smoothing, which can improve video playback on comput

Enables Windows Media Player to be shown only in skin mode, using a specified skin.\n\n\nThis policy displays the Player only in

Specifies that Windows Media Player can attempt to use selected protocols when receiving streaming media from a server running

Allows you to disable Windows Messenger.\n\n\nIf you enable this setting, Windows Messenger will not run.\n\n\nIf you disable

Allows you to disable Windows Messenger.\n\n\nIf you enable this setting, Windows Messenger will not run.\n\n\nIf you disable

Windows Messenger is automatically loaded and running when a user logs on to a Windows XP computer. You can use this setting

Windows Messenger is automatically loaded and running when a user logs on to a Windows XP computer. You can use this setting

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service automatically listens on the netw

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses Basic authentication.\n\n\nIf

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts Basic authentication from

\n\n This policy setting allows you to manage whether the Windows Remote Management (WinRM) client uses CredSSP authenticat

\n\n This policy setting allows you to manage whether the Windows Remote Management (WinRM) service accepts CredSSP authen

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client sends and receives unencrypted

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service sends and receives unencrypte

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Digest authentication.

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Kerberos authenticati

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not accept Kerberos credent

This policy setting allows you to manage whether the Windows Remote Management (WinRM) client will not use Negotiate authenticati

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service will not accept Negotiate authent

\n\n This policy setting allows you to set the hardening level of the Windows Remote Management (WinRM) service with regard t

This policy setting allows you to manage whether Windows Remote Management (WinRM) client uses the list specified in TrustedHostsLi

This policy setting enables or disables an HTTP listener created for backward compatibility purposes in the Windows Remote Management

This policy setting enables or disables an HTTPS listener created for backward compatibility purposes in the Windows Remote Management

Configures access to remote shells.\n\n\nIf you enable this policy setting and set it to False, new remote shell connections will be

Configures the maximum number of users able to concurrently perform remote shell operations on the system.\n\n\nThe value can be a

Configures maximum time in milliseconds remote shell will stay open without any user activity until it is automatically deleted.\n\

Configures maximum total amount of memory in megabytes that can be allocated by any active remote shell and all its child proces

Configures the maximum number of processes a remote shell is allowed to launch.\n\n\nAny number from 0 to 0x7FFFFFFF can be se

Configures maximum number of concurrent shells any user can remotely open on the same system.\n\n\nAny number from 0 to 0x7FFFFFF

\n\n This policy setting is deprecated.\n

Specifies whether Automatic Updates should automatically install certain updates that neither interrupt Windows services nor resta

This policy setting allows you to control whether non-administrative users will receive update notifications based on the "Config

This policy setting allows you to manage whether Automatic Updates accepts updates signed by entities other than Microsoft when th

Specifies the hours that Windows will use to determine how long to wait before checking for available updates. The exact wait time

Specifies whether this computer will receive security updates and other important downloads through the Windows automatic updatin

Specifies the amount of time for Automatic Updates to wait before proceeding with a scheduled restart.\n\n\nIf the status is set to

This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is allowed to be the default choice i

This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is allowed to be the default choice i

This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Windows

This policy setting allows you to manage whether the 'Install Updates and Shut Down' option is displayed in the Shut Down Windows

Specifies the target group name or names that should be used to receive updates from an intranet Microsoft update service.\n\n\nIf

Specifies whether the Windows Update will use the Windows Power Management features to automatically wake up the system from hi

Specifies that to complete a scheduled installation, Automatic Updates will wait for the computer to be restarted by any user who i

This setting allows you to remove access to Windows Update.\n\n\nIf you enable this setting, all Windows Update features are rem

Specifies the amount of time for Automatic Updates to wait before prompting again with a scheduled restart.\n\n\nIf the status is s

Specifies the amount of time for Automatic Updates to wait, following system startup, before proceeding with a scheduled installatio

Specifies an intranet server to host updates from Microsoft Update. You can then use this update service to automatically update

Specifies whether Automatic Updates will deliver both important as well as recommended updates from the Windows Update update

This policy setting allows you to control whether users see detailed enhanced notification messages about featured software from th

This setting controls automatic updates to a user's computer.\n\n\nWhenever a user connects to the Internet, Windows searches

The number of minutes the system will wait for the hung logon sessions before proceeding with the system shutdown.\n\n\nIf this se

This policy controls the legacy remote shutdown interface (named pipe). The named pipe remote shutdown interface is needed in

Specifies an alternate user interface.\n\n\nThe Explorer program (%windir%\explorer.exe) creates the familiar Windows interface, but

This policy setting controls whether or not software can simulate the Secure Attention Sequence (SAS).\n\n\nIf you enable this pol

This policy setting controls whether or not the system displays information about previous logons and logon failures to the user

This policy controls whether the logged on user should be notified when his logon hours are about to expire. By default, a user i

This policy controls whether the logged on user should be notified if the logon server could not be contacted during logon and he

This policy controls whether the logged on user should be notified if the logon server could not be contacted during logon and he

This policy controls which action will be taken when the logon hours expire for the logged on user. The actions include lock the

This policy setting specifies whether Windows will allow console applications and GUI applications without visible top-level windo

Set up the menu name and URL for the custom Internet search provider.\n\n\nIf you enable this setting, the specified menu name an

Reboot Required Logoff Required Active Directory Schema or Domain Requirements

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No Yes None

No Yes None

No Yes None

No Yes None

No Yes None

No Yes None

No Yes None

No Yes None

No Yes None

No Yes None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No Yes None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No Yes

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No Yes

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No Yes None

No Yes None

No No None

No No None

No No None

No No None

No No None

No No Yes

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No Yes

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

Yes No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

No No None

Yes No None

No Yes None

No No None

No No None

No No None

No Yes None

No Yes None

No Yes None

No No None

No No None

Policy Path Policy Name Supported On Registry Settings Help Text Comments

Computer Configuration\Windows Settings\Account Policies\Password Policy Enforce password history Windows XP SP2, Windows Server 2003 Password Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Account Policies\Password Policy Maximum password age Windows XP SP2, Windows Server 2003 Password Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Account Policies\Password Policy Minimum password age Windows XP SP2, Windows Server 2003 Password Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Account Policies\Password Policy Minimum password length Windows XP SP2, Windows Server 2003 Password Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Account Policies\Password Policy Password must meet complexity requirement Windows XP SP2, Windows Server 2003 Password Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Account Policies\Password Policy Store passwords using reversible encryption for all users in the domain Windows XP SP2, Windows Server 2003 Password Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Account Policies\Account Lockout Policy Account lockout duration Windows XP SP2, Windows Server 2003 Account Lockout Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Account Policies\Account Lockout Policy Account lockout threshold Windows XP SP2, Windows Server 2003 Account Lockout Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Account Policies\Account Lockout Policy Reset lockout counter after Windows XP SP2, Windows Server 2003 Account Lockout Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Kerberos Policy Enforce user logon restrictions Windows XP SP2, Windows Server 2003 Kerberos Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Kerberos Policy Maximum lifetime for service ticket Windows XP SP2, Windows Server 2003 Kerberos Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Kerberos Policy Maximum lifetime for user ticket Windows XP SP2, Windows Server 2003 Kerberos Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Kerberos Policy Maximum lifetime for user ticket renewal Windows XP SP2, Windows Server 2003 Kerberos Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Kerberos Policy Maximum tolerance for computer clock synchronization Windows XP SP2, Windows Server 2003 Kerberos Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Audit Policy Audit account logon events Windows XP SP2, Windows Server 2003 Audit Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Audit Policy Audit account management Windows XP SP2, Windows Server 2003 Audit Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Audit Policy Audit directory service access Windows XP SP2, Windows Server 2003 Audit Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Audit Policy Audit logon events Windows XP SP2, Windows Server 2003 Audit Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Audit Policy Audit object access Windows XP SP2, Windows Server 2003 Audit Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Audit Policy Audit policy change Windows XP SP2, Windows Server 2003 Audit Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Audit Policy Audit privilege use Windows XP SP2, Windows Server 2003 Audit Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Audit Policy Audit process tracking Windows XP SP2, Windows Server 2003 Audit Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\Audit Policy Audit system events Windows XP SP2, Windows Server 2003 Audit Policy security settings are not registry keys. No

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Access this computer from the network Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Access Credential Manager as a trusted caller Windows Vista, Windows Server 2008 User Rights security settings are not registry keys This setting is used by Credential Manager during Backup/Restore. No accounts should have this privilege, as it is only assigned to Winlogon. Users saved credentials might be compromised if this privilege is given to other entities. No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Act as part of the operating system Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Add workstations to a domain Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Adjust memory quotas for a process Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Allow log on locally Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Allow log on through Remote Desktop Services Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Backup files and directories Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Bypass traverse checking Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Change the system time Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Change the time zone Windows Vista, Windows Server 2008 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Create a pagefile Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Create a token object Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Create global objects Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Create permanent shared objects Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Create Symbolic Links Windows Vista, Windows Server 2008 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Debug programs Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Deny access to this computer from the network Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Deny log on as a batch job Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Deny log on as a service Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Deny log on locally Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Deny log on through Remote Desktop Services Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Enable computer and user accounts to be trusted for delegation Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Force shutdown from a remote system Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Generate security audits Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Impersonate a client after authentication Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Increase a process working set Windows Vista, Windows Server 2008 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Increase scheduling authority Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Load and unload device drivers Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Lock pages in memory Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Log on as a batch job Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Log on as a service Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Log on locally Windows XP SP2 User Rights security settings are not registry keys No

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Manage auditing and security log Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Modify an object label Windows Vista, Windows Server 2008 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Modify firmware environment values Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Perform volume maintenance tasks Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Profile single process Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Profile system performance Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Remove computer from docking station Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Replace a process level token Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Restore files and directories Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Shut down the system Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Synchronize directory service data Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\User Rights Assignment Take ownership of files or other objects Windows XP SP2, Windows Server 2003 User Rights security settings are not registry keys No Logoff required

Computer Configuration\Windows Settings\Local Policies\Security Options Accounts: Administrator account status Windows XP SP2, Windows Server 2003 Not a registry key No

Computer Configuration\Windows Settings\Local Policies\Security Options Accounts: Guest account status Windows XP SP2, Windows Server 2003 Not a registry key No

Computer Configuration\Windows Settings\Local Policies\Security Options Accounts: Limit local account use of blank passwords to console logon only Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\LimitBlankPasswordUse No

Computer Configuration\Windows Settings\Local Policies\Security Options Accounts: Rename administrator account Windows XP SP2, Windows Server 2003 Not a registry key No

Computer Configuration\Windows Settings\Local Policies\Security Options Accounts: Rename guest account Windows XP SP2, Windows Server 2003 Not a registry key No

Computer Configuration\Windows Settings\Local Policies\Security Options Audit: Audit the accesss of global system objects Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\AuditBaseObjects Yes

Computer Configuration\Windows Settings\Local Policies\Security Options Audit: Audit the use of Backup and Restore privilege Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\FullPrivilegeAuditing Yes

Computer Configuration\Windows Settings\Local Policies\Security Options Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings Windows Vista, Windows Server 2008 MACHINE\System\CurrentControlSet\Control\Lsa\SCENoApplyLegacyAuditPolicy No

Computer Configuration\Windows Settings\Local Policies\Security Options Audit: Shut down system immediately if unable to log security audits Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\CrashOnAuditFail Yes

Computer Configuration\Windows Settings\Local Policies\Security Options DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax Windows XP SP2, Windows Server 2003 MACHINE\SOFTWARE\policies\Microsoft\windows NT\DCOM\MachineAccessRestriction No

Computer Configuration\Windows Settings\Local Policies\Security Options DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax Windows XP SP2, Windows Server 2003 MACHINE\SOFTWARE\policies\Microsoft\windows NT\DCOM\MachineLaunchRestriction No

Computer Configuration\Windows Settings\Local Policies\Security Options Devices: Allow undock without having to log on Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UndockWithoutLogon No

Computer Configuration\Windows Settings\Local Policies\Security Options Devices: Allowed to format and eject removable media Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateDASD No

Computer Configuration\Windows Settings\Local Policies\Security Options Devices: Prevent users from installing printer drivers Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers\AddPrinterDrivers No

Computer Configuration\Windows Settings\Local Policies\Security Options Devices: Restrict CD-ROM access to locally logged-on user only Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateCDRoms No

Computer Configuration\Windows Settings\Local Policies\Security Options Devices: Restrict floppy access to locally logged-on user only Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AllocateFloppies No

Computer Configuration\Windows Settings\Local Policies\Security Options Devices: Unsigned driver installation behavior Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Driver Signing\Policy No

Computer Configuration\Windows Settings\Local Policies\Security Options Domain controller: Allow server operators to schedule tasks Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\SubmitControl Yes

Computer Configuration\Windows Settings\Local Policies\Security Options Domain controller: LDAP server signing requirements Windows Server 2003? MACHINE\System\CurrentControlSet\Services\NTDS\Parameters\LDAPServerIntegrity No

Computer Configuration\Windows Settings\Local Policies\Security Options Domain controller: Refuse machine account password changes Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RefusePasswordChange No

Computer Configuration\Windows Settings\Local Policies\Security Options Domain member: Digitally encrypt or sign secure channel data (always) Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrSeal No

Computer Configuration\Windows Settings\Local Policies\Security Options Domain member: Digitally encrypt secure channel data (when possible) Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SealSecureChannel No

Computer Configuration\Windows Settings\Local Policies\Security Options Domain member: Digitally sign secure channel data (when possible) Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SignSecureChannel No

Computer Configuration\Windows Settings\Local Policies\Security Options Domain member: Disable machine account password changes Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\DisablePasswordChange No

Computer Configuration\Windows Settings\Local Policies\Security Options Domain member: Maximum machine account password age Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\MaximumPasswordAge No

Computer Configuration\Windows Settings\Local Policies\Security Options Domain member: Require strong (Windows 2000 or later) session key Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireStrongKey No

Computer Configuration\Windows Settings\Local Policies\Security Options Interactive logon: Do not display last user name Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayLastUserName No

Computer Configuration\Windows Settings\Local Policies\Security Options Interactive Logon: Display user information when session is locked Windows Vista, Windows Server 2008 Machine\Software\Microsoft\Windows\CurrentVersion\Policies\System, value=DontDisplayLockedUserId Interactive Logon: Display user information when session is locked

Computer Configuration\Windows Settings\Local Policies\Security Options Interactive logon: Do not require CTRL+ALT+DELETE Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCAD No

Computer Configuration\Windows Settings\Local Policies\Security Options Interactive logon: Message text for users attempting to logon Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeText No

Computer Configuration\Windows Settings\Local Policies\Security Options Interactive logon: Message title for users attempting to logon Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeCaption No

Computer Configuration\Windows Settings\Local Policies\Security Options Interactive logon: Number of previous logons to cache (in case domain controller is not available) Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CachedLogonsCount No

Computer Configuration\Windows Settings\Local Policies\Security Options Interactive logon: Prompt user to change password before expiration Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\PasswordExpiryWarning No

Computer Configuration\Windows Settings\Local Policies\Security Options Interactive logon: Require Domain Controller authentication to unlock workstation Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ForceUnlockLogon No

Computer Configuration\Windows Settings\Local Policies\Security Options Interactive logon: Require smart card Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ScForceOption No

Computer Configuration\Windows Settings\Local Policies\Security Options Interactive logon: Smart card removal behavior Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ScRemoveOption No

Computer Configuration\Windows Settings\Local Policies\Security Options Microsoft network client: Digitally sign communications (always) Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\RequireSecuritySignature Yes

Computer Configuration\Windows Settings\Local Policies\Security Options Microsoft network client: Digitally sign communications (if server agrees) Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnableSecuritySignature Yes

Computer Configuration\Windows Settings\Local Policies\Security Options Microsoft network client: Send unencrypted password to third-party SMB servers Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnablePlainTextPassword Yes

Computer Configuration\Windows Settings\Local Policies\Security Options Microsoft network server: Amount of idle time required before suspending session Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\AutoDisconnect Yes

Computer Configuration\Windows Settings\Local Policies\Security Options Microsoft network server: Digitally sign communications (always) Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSecuritySignature Yes

Computer Configuration\Windows Settings\Local Policies\Security Options Microsoft network server: Digitally sign communications (if client agrees) Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature No

Computer Configuration\Windows Settings\Local Policies\Security Options Microsoft network server: Disconnect clients when logon hours expire Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableForcedLogOff No

Computer Configuration\Windows Settings\Local Policies\Security Options Microsoft network server: Server SPN target name validation level Windows 7, Windows Server 2008 R2 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\SmbServerNameHardeningLevel No

Computer Configuration\Windows Settings\Local Policies\Security Options Network access: Allow anonymous SID/Name translation Windows XP SP2, Windows Server 2003 Not a registry key No

Computer Configuration\Windows Settings\Local Policies\Security Options Network access: Do not allow anonymous enumeration of SAM accounts Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymousSAM No

Computer Configuration\Windows Settings\Local Policies\Security Options Network access: Do not allow anonymous enumeration of SAM accounts and shares Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous No

Computer Configuration\Windows Settings\Local Policies\Security Options Network access: Do not allow storage of credentials or .NET Passports for network authentication Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\DisableDomainCreds No

Computer Configuration\Windows Settings\Local Policies\Security Options Network access: Let Everyone permissions apply to anonymous users Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous No

Computer Configuration\Windows Settings\Local Policies\Security Options Network access: Named Pipes that can be accessed anonymously Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionPipes Yes

Computer Configuration\Windows Settings\Local Policies\Security Options Network access: Remotely accessible registry paths Windows XP SP2 MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths\Machine No

Computer Configuration\Windows Settings\Local Policies\Security Options Network access: Remotely accessible registry paths and subpaths Windows Server 2003 MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths\Machine No

Computer Configuration\Windows Settings\Local Policies\Security Options Network access: Restrict anonymous access to Named Pipes and Shares Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionShares Yes

Computer Configuration\Windows Settings\Local Policies\Security Options Network access: Shares that can be accessed anonymously Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionShares Yes

Computer Configuration\Windows Settings\Local Policies\Security Options Network access: Sharing and security model for local accounts Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\ForceGuest No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Do not store LAN Manager hash value on next password change Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Force logoff when logon hours expire Windows XP SP2, Windows Server 2003 Not a registry key No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: LAN Manager authentication level Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\LmCompatibilityLevel No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: LDAP client signing requirements Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Services\LDAP\LDAPClientIntegrity Yes

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Minimum session security for NTLM SSP based (including secure RPC) clients Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinClientSec No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Minimum session security for NTLM SSP based (including secure RPC) servers Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinServerSec No

Reboot Required

Enforce password history

Maximum password age

Minimum password age

Minimum password length

Password must meet complexity requirements

Store passwords using reversible encryption

Account lockout duration

Account lockout threshold

Reset account lockout counter after

Enforce user logon restrictions clients will get the new setting after a maximum of 8 hours but for DCs to assign these new

Maximum lifetime for service ticket clients will get the new setting after a maximum of 8 hours but for DCs to assign these new

Maximum lifetime for user ticket clients will get the new setting after a maximum of 8 hours but for DCs to assign these new

Maximum lifetime for user ticket renewal clients will get the new setting after a maximum of 8 hours but for DCs to assign these new

Maximum tolerance for computer clock synchronization clients will get the new setting after a maximum of 8 hours but for DCs to assign these new

Audit account logon events

Audit account management

Audit directory service access

Audit logon events

Audit object access

Audit policy change

Audit privilege use

Audit process tracking

Audit system events

Access this computer from the network

Act as part of the operating system

Add workstations to domain

Adjust memory quotas for a process

Allow log on locally

Allow log on through Remote Desktop Services

Back up files and directories

Bypass traverse checking

Change the system time

Change the Time Zone

Create a pagefile

Create a token object

Create global objects

Create permanent shared objects

Create Symbolic Links

Debug programs

Deny access to this computer from the network

Deny log on as a batch job

Deny log on as a service

Deny log on locally

Deny log on through Remote Desktop Services

Enable computer and user accounts to be trusted for delegation

Force shutdown from a remote system

Generate security audits

Impersonate a client after authentication

Increase a process working set

Increase scheduling priority

Load and unload device drivers

Lock pages in memory

Log on as a batch job Note: In Windows 2000 Server, Windows 2000 Professional, Windows XP Professional, and

Log on as a service

Log on locally Note: See also the corresponding Windows Server 2003 Allow log on locally policy

Manage auditing and security log

Modify an object label

Modify firmware environment values

Perform volume maintenance tasks

Profile single process

Profile system performance

Remove computer from docking station

Replace a process level token

Restore files and directories

Shut down the system

Synchronize directory service data

Take ownership of files or other objects

Accounts: Administrator account status

Accounts: Guest account status

Accounts: Limit local account use of blank passwords to console logon only

Accounts: Rename administrator account

Accounts: Rename guest account

Audit: Audit the access of global system objects

Audit: Audit the use of Backup and Restore privilege

Audit: Force audit policy subcategory settings (Windows Vista or later) to override audit policy category settings.

Audit: Shut down system immediately if unable to log security audits

DCOM: Machine Access Restrictions in Security Descriptor Definition Language (SDDL) syntax

DCOM: Machine Launch Restrictions in Security Descriptor Definition Language (SDDL) syntax

Devices: Allow undock without having to log on

Devices: Allowed to format and eject removable media

Devices: Prevent users from installing printer drivers when connecting to shared printers For the policy change to take effect, the spooler service needs to be stopped/restarted, but

Devices: Restrict CD-ROM access to locally logged-on user only

Devices: Restrict floppy access to locally logged-on user only

Devices: Unsigned driver installation behavior

Domain controller: Allow server operators to schedule tasks Restart of service might be sufficient

Domain controller: LDAP server signing requirements

Domain controller: Refuse machine account password changes

Domain member: Digitally encrypt or sign secure channel data (always) Important: In order to take advantage of this policy on member workstations and

Domain member: Digitally encrypt secure channel data (when possible)

Domain member: Digitally sign secure channel data (when possible)

Domain member: Disable machine account password changes

Domain member: Maximum machine account password age Important: This setting applies to Windows 2000 computers, but it is not available through

Domain member: Require strong (Windows 2000 or later) session key

Interactive logon: Do not display last user nameThis security setting determines whether the name of the last user to log on to the computer is displayed in the Windows logon screen.

Interactive logon: Do not require CTRL+ALT+DEL

Interactive logon: Message text for users attempting to log on

Interactive logon: Message title for users attempting to log on

Interactive logon: Number of previous logons to cache (in case domain controller is not available)

Interactive logon: Prompt user to change password before expiration

Interactive logon: Require Domain Controller authentication to unlock Important: This setting applies to Windows 2000 computers, but it is not available through

Interactive logon: Require smart card Important: This setting will apply to any computers running Windows 2000 through

Interactive logon: Smart card removal behavior Only LogOff is required for W2K, XP and W2K3 computers. In Vista, start/restart the

Microsoft network client: Digitally sign communications (always) Important: For this policy to take effect on computers running Windows 2000, client-

Microsoft network client: Digitally sign communications (if server agrees)

Microsoft network client: Send unencrypted password to connect to third-party SMB servers

Microsoft network server: Amount of idle time required before suspending a session

Microsoft network server: Digitally sign communications (always) Important: For this policy to take effect on computers running Windows 2000, server-

Microsoft network server: Digitally sign communications (if client agrees)

Microsoft network server: Disconnect clients when logon hours expire

Microsoft network server: Server SPN target name validation level Network access: Allow anonymous SID/name translation

Network access: Do not allow anonymous enumeration of SAM accounts Important: This policy has no impact on domain controllers. For more information,

Network access: Do not allow anonymous enumeration of SAM accounts and shares

Network access: Do not allow storage of credentials or .NET Passports for network authentication

Network access: Let Everyone permissions apply to anonymous users

Network access: Named pipes that can be accessed anonymously

Network access: Remotely accessible registry paths Important: The Network access: Remotely accessible registry paths security

Network access: Remotely accessible registry paths and subpaths Important: On Windows XP, this security setting was called "Network access:

Network access: Restrict anonymous access to Named Pipes and Shares

Network access: Shares that can be accessed anonymously

Network access: Sharing and security model for local accounts Important: This setting only affects computers running Windows XP Professional which are

Network security: Do not store LAN Manager hash value on next password change Important: Windows 2000 Service Pack 2 (SP2) and above offer compatibility with

Network security: Force logoff when logon hours expire

Network security: LAN Manager authentication level

Important: This setting can affect the ability of computers running Windows 2000 Server,

Network security: LDAP client signing requirements

Network security: Minimum session security for NTLM SSP based (including secure RPC) clients Warning: This setting will apply to any computers running Windows 2000 through

Network security: Minimum session security for NTLM SSP based (including secure RPC) servers Warning: This setting will apply to any computers running Windows 2000 through

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers Windows 7, Windows Server 2008 R2 MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\RestrictSendingNTLMTraffic No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Restrict NTLM: Incoming NTLM traffic Windows 7, Windows Server 2008 R2 MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\RestrictReceivingNTLMTraffic No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Restrict NTLM: Audit Incoming NTLM Traffic Windows 7, Windows Server 2008 R2 MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\AuditReceivingNTLMTraffic No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Restrict NTLM: NTLM authentication in this domain Windows 7, Windows Server 2008 R2 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RestrictNTLMInDomain No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Restrict NTLM: Audit NTLM authentication in this domain Windows 7, Windows Server 2008 R2 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\AuditNTLMInDomain No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication Windows 7, Windows Server 2008 R2 MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\ClientAllowedNTLMServers No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Restrict NTLM: Add server exceptions in this domain Windows 7, Windows Server 2008 R2 MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\DCAllowedNTLMServers No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Allow LocalSystem NULL session fallback Windows 7, Windows Server 2008 R2 MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\allownullsessionfallback No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Allow Local System to use computer identity for NTLM Windows 7, Windows Server 2008 R2 MACHINE\System\CurrentControlSet\Control\Lsa\UseMachineId No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Allow PKU2U authentication requests to this computer to use online identities. Windows 7, Windows Server 2008 R2 MACHINE\System\CurrentControlSet\Control\Lsa\pku2u\AllowOnlineID No

Computer Configuration\Windows Settings\Local Policies\Security Options Network security: Configure encryption types allowed for Kerberos Windows 7, Windows Server 2008 R2 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters\SupportedEncryptionTypes No

Computer Configuration\Windows Settings\Local Policies\Security Options Recovery console: Allow automatic administrative logon Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SecurityLevel No

Computer Configuration\Windows Settings\Local Policies\Security Options Recovery console: Allow floppy copy and access to all drives and all folders Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SetCommand No

Computer Configuration\Windows Settings\Local Policies\Security Options Shutdown: Allow system to be shut down without having to log on Windows XP SP2, Windows Server 2003 MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ShutdownWithoutLogon No Requires logoff

Computer Configuration\Windows Settings\Local Policies\Security Options Shutdown: Clear virtual memory pagefile Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management\ClearPageFileAtShutdown Yes

Computer Configuration\Windows Settings\Local Policies\Security Options System cryptography: Use FIPS compliant algorithms for encryption, hashing, and signing Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy No

Computer Configuration\Windows Settings\Local Policies\Security Options System Cryptography: Force strong key protection for user keys stored on the computer Windows Server 2003 MACHINE\Software\Policies\Microsoft\Cryptography\ForceKeyProtection Yes

Computer Configuration\Windows Settings\Local Policies\Security Options System objects: Default owner for objects created by members of the Administrators group Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Lsa\NoDefaultAdminOwner No

Computer Configuration\Windows Settings\Local Policies\Security Options System objects: Require case insensitivity for non-Windows subsystems Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel\ObCaseInsensitive Yes

Computer Configuration\Windows Settings\Local Policies\Security Options System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links) Windows XP SP2, Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Session Manager\ProtectionMode Yes

Computer Configuration\Windows Settings\Local Policies\Security Options System settings: Optional subsystems Windows Server 2003 MACHINE\System\CurrentControlSet\Control\Session Manager\SubSystems\optional Yes

Computer Configuration\Windows Settings\Local Policies\Security Options System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies Windows Server 2003 MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\AuthenticodeEnabled No

Computer Configuration\Windows Settings\Local Policies\Security Options Admin Approval Mode for the Built-in Administrator account Windows Vista, Windows Server 2008 SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\FilterAdministratorToken No

Computer Configuration\Windows Settings\Local Policies\Security Options Behavior of the elevation prompt for administrators in Admin Approval Mode Windows Vista, Windows Server 2008 SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin No

Computer Configuration\Windows Settings\Local Policies\Security Options Behavior of the elevation prompt for standard users Windows Vista, Windows Server 2008 SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorUser No

Computer Configuration\Windows Settings\Local Policies\Security Options Detect application installations and prompt for elevation Windows Vista, Windows Server 2008 SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableInstallerDetection No

Computer Configuration\Windows Settings\Local Policies\Security Options Only elevate executables that are signed and validated Windows Vista, Windows Server 2008 SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\ValidateAdminCodeSignatures No

Computer Configuration\Windows Settings\Local Policies\Security Options Only elevate UIAccess applications that are installed in secure locations Windows Vista, Windows Server 2008 SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableSecureUIAPaths No

Computer Configuration\Windows Settings\Local Policies\Security Options Run all administrators in Admin Approval Mode Windows Vista, Windows Server 2008 SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA Yes

Computer Configuration\Windows Settings\Local Policies\Security Options Switch to the secure desktop when prompting for elevation Windows Vista, Windows Server 2008 SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\PromptOnSecureDesktop No

Computer Configuration\Windows Settings\Local Policies\Security Options Virtualize file and registry write failures to per-user locations Windows Vista, Windows Server 2008 SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableVirtualization No

Computer Configuration\Windows Settings\Local Policies\Security Options Allow UIAccess applications to prompt for elevation without using the secure desktop. Windows Vista, Windows Server 2008 SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableUIADesktopToggle No

Computer Configuration\Windows Settings\Security Settings\Event Log Maximum application log size Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys. No

Computer Configuration\Windows Settings\Security Settings\Event Log Maximum security log size Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys. No

Computer Configuration\Windows Settings\Security Settings\Event Log Maximum system log size Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys. No

Computer Configuration\Windows Settings\Security Settings\Event Log Prevent local guests group from accessing application log Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys. No

Computer Configuration\Windows Settings\Security Settings\Event Log Prevent local guests group from accessing security log Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys. No

Computer Configuration\Windows Settings\Security Settings\Event Log Prevent local guests group from accessing system log Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys. No

Computer Configuration\Windows Settings\Security Settings\Event Log Retain application log Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys. No

Computer Configuration\Windows Settings\Security Settings\Event Log Retain security log Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys. No

Computer Configuration\Windows Settings\Security Settings\Event Log Retain system log Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys. No

Computer Configuration\Windows Settings\Security Settings\Event Log Retention method for application log Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys. No

Computer Configuration\Windows Settings\Security Settings\Event Log Retention method for security log Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys. No

Computer Configuration\Windows Settings\Security Settings\Event Log Retention method for system log Windows XP SP2, Windows Server 2003 Event Log security settings are not registry keys. No

Computer Configuration\Windows Settings\Security Settings\Restricted Groups Restricted Groups Windows XP SP2, Windows Server 2003 Restricted Groups policy settings are not registry keys.

Computer Configuration\Windows Settings\Security Settings\System Services System Services Windows XP SP2, Windows Server 2003 System Services policy settings are not registry keys.

Computer Configuration\Windows Settings\Security Settings\Registry Registry Windows XP SP2, Windows Server 2003 not a registry key

Computer Configuration\Windows Settings\Security Settings\File System File System Windows XP SP2, Windows Server 2003 File System policy settings are not registry keys.

Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers

Network security: Restrict NTLM: Incoming NTLM traffic

Network security: Restrict NTLM: Audit Incoming NTLM Traffic

Network security: Restrict NTLM: NTLM authentication in this domain

Network security: Restrict NTLM: Audit NTLM authentication in this domain

Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication

Network security: Restrict NTLM: Add server exceptions in this domain

Network security: Allow LocalSystem NULL session fallback

Network security: Allow Local System to use computer identity for NTLM

Network security: Allow PKU2U authentication requests to this computer to use online identities.

Network security: Configure encryption types allowed for Kerberos

Recovery console: Allow automatic administrative logon Require restart of recovery console

Recovery console: Allow floppy copy and access to all drives and all folders Require restart of recovery console

Shutdown: Allow system to be shut down without having to log on

Shutdown: Clear virtual memory pagefile Vista does NOT require reboot

System cryptography: Use FIPS 140 compliant cryptographic algorithms, including encryption, hashing and signing algorithms

System Cryptography: Force strong key protection for user keys stored on the computer

Requires reboot with CNG on Vista; Does not require reboot with CAPI on Vista; Does not require reboot on XP, 2003 with CAPI

System objects: Default owner for objects created by members of the Administrators groupDescription

This policy does not exist on Vista

System objects: Require case insensitivity for non-Windows subsystems

System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links)

System settings: Optional subsystems

System settings: Use Certificate Rules on Windows Executables for Software Restriction Policies

User Account Control: Admin Approval Mode for the Built-in Administrator account

User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode

User Account Control: Behavior of the elevation prompt for standard usersThis security setting determines the behavior of the elevation prompt for standard usersUser Account Control: Detect application installations and prompt for elevation

User Account Control: Only elevate executables that are signed and validated

User Account Control: Only elevate UIAccess applications that are installed in secure locations

User Account Control: Run all users, including administrators, as standard users.

User Account Control: Switch to the secure desktop when prompting for elevation

User Account Control: Virtualizes file and registry write failures to per-user locations

User Account Control: Allow UIAccess applications to prompt for elevation without using the secure desktop.

Maximum application log size Note: This setting does not appear in the Local Computer Policy object. Maximum security log size Note: This setting does not appear in the Local Computer Policy object. Maximum system log size Note: This setting does not appear in the Local Computer Policy object. Prevent local guests group and ANONYMOUS LOGIN users from accessing application log Notes: This setting does not appear in the Local Computer Policy object.

Prevent local guests group and ANONYMOUS LOGIN users from accessing security log Notes: This setting does not appear in the Local Computer Policy object.

Prevent local guests group and ANONYMOUS LOGIN users from accessing system log Note: This setting does not appear in the Local Computer Policy object.

Retain application log Notes: This setting does not appear in the Local Computer Policy object.

Retain security log Notes: This setting does not appear in the Local Computer Policy object.

Retain system log

This security setting determines the number of days' worth of events to be retained for the system log if the retention method for the system log is By Days.

Set this value only if you archive the log at scheduled intervals and you make sure that the Maximum system log size is large enough to accommodate the interval.

Note: This setting does not appear in the Local Computer Policy object.Default: None.

Note: This setting does not appear in the Local Computer Policy object.

Retention method for application log

This security setting determines the "wrapping" method for the application log.

If you do not archive the application log, in the Properties dialog box for this policy, select the Define this policy setting check box, and then click Overwrite events as needed.

If you archive the log at scheduled intervals, in the Properties dialog box for this policy, select the Define this policy setting check box, and then click Overwrite events by days and specify the appropriate number of days in the Retain application log setting. Make sure that the Maximum application log size is large enough to accommodate the interval.

If you must retain all the events in the log, in the Properties dialog box for this policy, select the Define this policy setting check box, and then click Do not overwrite events (clear log manually). This option requires that the log be cleared manually. In this case, when the maximum log size is reached, new events are discarded.


Default: None.


Retention method for security log

This security setting determines the "wrapping" method for the security log.

If you do not archive the security log, in the Properties dialog box for this policy, select the Define this policy setting check box, and then click Overwrite events as needed.

If you archive the log at scheduled intervals, in the Properties dialog box for this policy, select the Define this policy setting check box, and then click Overwrite events by days and specify the appropriate number of days in the retain security log setting. Make sure that the Maximum security log size is large enough to accommodate the interval.

If you must retain all the events in the log, in the Properties dialog box for this policy, select the Define this policy setting check box, and then click Do not overwrite events (clear log manually). This option requires that the log be cleared manually. In this case, when the maximum log size is reached, new events are discarded.

Notes

This setting does not appear in the Local Computer Policy object.

A user must possess the Manage auditing and security log user right to access the security log.

Default: None.


Retention method for system log

This security setting determines the "wrapping" method for the system log.

If you do not archive the system log, in the Properties dialog box for this policy, select the Define this policy setting check box, and then click Overwrite events as needed.

If you archive the log at scheduled intervals, in the Properties dialog box for this policy, select the Define this policy setting check box, and then click Overwrite events by days and specify the appropriate number of days in the Retain system log setting. Make sure that the Maximum system log size is large enough to accommodate the interval

.If you must retain all the events in the log, in the Properties dialog box for this policy, select the Define this policy setting check box, and then click Do not overwrite events (clear log manually). This option requires that the log be cleared manually. In this case, when the maximum log size is reached, new events are discarded


Default: None.


Restricted Groups

This security setting allows an administrator to define two properties for security-sensitive groups ("restricted" groups).

The two properties are Members and Member Of. The Members list defines who belongs and who does not belong to the restricted group. The Member Of list specifies which other groups the restricted group belongs to.

When a Restricted Groups Policy is enforced, any current member of a restricted group that is not on the Members list is removed. Any user on the Members list who is not currently a member of the restricted group is added.

You can use Restricted Groups policy to control group membership. Using the policy, you can specify what members are part of a group. Any members that are not specified in the policy are removed during configuration or refresh. In addition, the reverse membership configuration option ensures that each Restricted Group is a member of only those groups that are specified in the Member Of column.

For example, you can create a Restricted Groups policy to only allow specified users (for example, Alice and John) to be members of the Administrators group. When policy is refreshed, only Alice and John will remain as members of the Administrators group.

There are two ways to apply Restricted Groups policy:

Define the policy in a security template, which will be applied during configuration on your local computer.Define the setting on a Group Policy object (GPO) directly, which means that the policy goes into effect with every refresh of policy. The security settings are refreshed every 90 minutes on a workstation or server and every 5 minutes on a domain controller. The settings are also refreshed every 16 hours, whether or not there are any changes.Default: None specified.

Caution

If a Restricted Groups policy is defined and Group Policy is refreshed, any current member not on the Restricted Groups policy members list is removed. This can include default members, such as administrators.

Notes

Restricted Groups should be used primarily to configure membership of local groups on workstation or member servers.An empty Members list means that the restricted group has no members; an empty Member Of list means that the groups to which the restricted group belongs are not specified.

System Services security settings

Allows an administrator to define the startup mode (manual, automatic, or disabled) as well as the access permissions (Start, Stop, or Pause) for all system services.

Default: Undefined.

Notes

This setting does not appear in the Local Computer Policy object.If you choose to set system service startup to Automatic, perform adequate testing to verify that the services can start without user intervention.For performance optimization, set unnecessary or unused services to Manual.


Registry security settings

Allows an administrator to define access permissions (on discretionary access control lists (DACLs)) and audit settings (on system access control lists (SACLs)) for registry keys using Security Configuration Manager.

Default: Undefined.



File System security settings

Allows an administrator to define access permissions (on discretionary access control lists (DACLs)) and audit settings (on system access control lists (SACLs)) for file system objects using Security Configuration Manager.

Default: Undefined.

